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Abstract 



This thesis provides an exphcit construetion of a quantum Goppa code for any 
hypereUiptic curve over a non-binary field. HypereUiptic curves have conjugate 
pairs of rational places. We use these pairs to construct self-orthogonal classical 
Goppa codes with respect to a weighted inner product. These codes are also 
self-orthogonal with respect to a symplectic inner product and therefore define 
quantum stabilizer codes. A final transformation leads to a quantum Goppa 
code with respect to the standard symplectic inner product. Some examples 
illustrate the described construction. 

Furthermore we present a projection of a higher dimensional code onto the base 
field and a special case when the projected code is again weighted self-orthogonal 
and symmetric. 
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Introduction 



This diploma thesis uses algebraic geometry, coding theory, and quantum error 
correction to construct some classes of new quantum Goppa codes. In particular 
we show that every hyperelliptic curve which has at least one pair of rational 
places can be used to construct a code. The presented constructions lead to 
explicit descriptions of quantum error correcting codes. We illustrate all con- 
structions by concrete computations which have been carried out with the help 
of the computer algebra system Magma • In order to be able to prove prop- 
erties of these quantum Goppa codes, some basic theory has to be introduced. 
This thesis does not assume the reader to be familiar with all three different 
topics and gives brief introductions. It is structured in the following way: 

In Chapter 1 the reader gets a short introduction to classical coding theory. The 
classical Hamming code will serve as an example in which we explain what it 
means to encode, correct errors, and finally decode codewords. 

The basics of quantum mechanics are introduced in Chapter 2. This chapter in- 
cludes the ideas of quantum information and quantum errors. We will see some 
general quantum error correcting codes before looking at stabilizer codes, a spe- 
cial kind of quantum codes that can use classical codes for quantum computing. 
Finally, this chapter shows a way how to transform stabilizer codes in order to 
make them orthogonal with respect to various symplectic inner products. 

Chapter 3 is an introduction to algebraic curves, function fields, divisors, and 
differentials. The main theorems arc the theorem of Riemann-Roch and the 
strong approximation theorem. It also introduces towers of function fields in 
order to be able to study the asymptotics of codes. Finally, Goppa codes are 
defined and we give special properties concerning self-orthogonality. 

In Chapter 4, a construction by R. Matsumoto for asymptotically good quantum 
codes over fields of characteristic two will be presented in detail. His ideas will 
play an important part in the constructions of the subsequent chapter. 

Chapter 5 is the main part of this thesis and gives some new constructions of 
quantum Goppa codes. We will use hyperelliptic function fields to construct 
weighted self-orthogonal Goppa codes that can be transformed to symplectic 
self-orthogonal quantum codes. One method to construct these codes is to use 
the well known CSS construction. The other method will use a direct construc- 
tion similar to the one of Chapter 4. Some examples shall help to understand 
the ideas better. 

Finally, Chapter 6 concludes the thesis. 



1 



Table of Notations 



This section gives an overview over the used symbols and notations. 



Notation for Codes 



c 


Hncar code 


d{x,y) 


Hamming distance 


wt{x) 


weight of X 


dimC 


dimension of code C 


[n, k, d] 


classical linear code with parameters n, k, d 


d{C) 


minimum distance of C 




canonical inner product on 


{x,yY 


inner product with weights on 


G 


generator matrix of a code C 


H 


parity check matrix of a code C 


s{x) 


syndrome of x corresponding to a code C 




dual code of C 




dual code of C with respect to ( , 


Cc{D,G) 


geometric Goppa code associated with D and G 


evD 


evaluation map 


Cn{D,G) 


Goppa code over differentials associated with D and G 


[[n, k, d]] 


quantum stabilizer code with parameters n, k, d 


{x,y)s 


symplectic inner product on F^" 




symplcctic inner product with weights on F^" 




symplectic dual code of C 




symplectic dual code of C with respect to ( , )° 



Quantum Information Language 





qudit in kct notation 


\bl...bn) 


quantum register in ket notation 


V 


Pauli group on single qudits 


Vn 


Pauli group on quantum registers of length n 


Xj, Zj 


generators of the Pauli group 


1 


identity operator 


H 


Hadamard gate 


C - NOT 


controUed-not gate 


C~U 


controlled unitary operation U 


Toffoli 


Toffoli gate 


NiS) 


Normalizer of the stabilizer S 
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Used Algebraic Geometry Terminology 



¥q finite field with q elements 

F^' n-dimensional vector space over 
projective space of dimension 2 

[F' : F] degree of a field extension F' / F 

char K characteristic of K 

K\T] polynomial ring in one variable over K 

K{x) rational function field 
(/(X, y, Z)) ideal spanned by /(X, F, Z) 

F/K algebraic function field of one variable 

O valuation ring of i^/-ftr 

P place of F/K 

Pf set of places of F/K 

Op valuation ring of a place P 

vp discrete valuation corresponding to P 

Fp residue class field of P 

x{P) residue class of an element x G O 

deg P degree of a place P 

Poo infinite place of K{x) 

Dp divisor group of F/K 

supp D support of the divisor D 

-Di < D2 ordering of divisors 

deg D degree of a divisor D 

(x) principal divisor of x 

(x)oo pole divisor of x 

C{A) space of functions associated with the divisor A 

dim A dimension of a divisor A 

g genus oi F/K 

Ap adele space of F/K 

Ap{A) space of adeles associated with the divisor A 

F module of Weil differentials of F/K 

il.F{A) module of Weil differentials associated with the divisor A 

(77) divisor of a Weil differential 7^ 

dx, udx differentials of F/ii' 

resp (77) residue of a differential rj at a, place P 

F'^ fixed field of a 

e{P'\P) ramification index of P' over P 

f{P'\P) relative degree of P' over P 

d{P'\P) different exponent of P' over P 

d{P') different exponent of P' if d{P'\P) is independent of P 

BiS{F'\F) different of F'/F 

Gal(F'|F) Galois group of F'/F 
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Chapter 1 

Classical Coding Theory 



Classical codes are used for error correction. Transmission of information over a 
noisy channel will always cause bit flip errors with a certain probability. When 
designing a code we try to maximise the number of correctable errors in a 
codeword and minimise the number of bits we have to send. Interesting math 
problems arise from the question how to construct families of codes that reach 
special bounds in their asymptotics. An example for this is the tower of quantum 
codes constructed in Chapterl^l In general, there are lots of different ideas, how 
to construct good codes, we will mostly look at codes coming from algebraic 
geometry. 

This chapter gives a short overview over the basic ideas of classical linear codes 
to introduce the notation used later on. For more information about classical 
coding theory we refer to ^Hl • 

1.1 Linear Codes 

Codes do not have to be linear, but if they are linear, many things become 
easier. Hence we will only use linear codes over finite fields ¥q where q = p™ is 
a prime power. 

1.1.1 Basic Definitions 

Definition 1.1. A linear code C (over the alphabet F^) is a linear subspace 
of F^'; the elements of C are called codewords. We call n the length of C and 
dim C (as F^-vector space) the dimension of C. 

Definition 1.2. For a = (ai, . . . , a„) and b = (61, ... , 5„) G F^ let 

d{a,b) := \{i \ at ^ . 

This function d is called the Hamming distance on and defines a metric. 
The weight of an element a G F^ is defined as 

wt(a) ~ rf(a,0) \{i \ Ui ^ 0}\ 
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Definition 1.3. The minimum distance d{C) of a linear code C ^ {0} is 
defined as 

d{C) := min {d{a, b) \ a,b e C and a 7^ b} = min {wt(c) | 7^ c G C}. 
The second equahty holds, because the code is linear and therefore for a,b £ C 

d(a,b) — d{a — b,0) — wt^a — b) 
and a — 5 G C because of linearity. 

Definition 1.4. An [n, k, d] code is a code of length n and dimension k with 
minimum distance d (see Definition ll.3|) detecting d—l and correcting t = [^^J 
errors. 

1.1.2 Encoding 

Definition 1.5. Let C be an [n, k] code over F^. A generator matrix Q oi C 

is a fc X 71 matrix whose rows form a basis of C, i.e. if {ci, . . . , c^.} is a basis of 
C, then 

g ^ ( ) ^ 

Definition 1.6. The canonical inner product on is defined by 

n 

(a, b) ^ a,6, 
1=1 

for a = (oi, . . . , a„) and 6 = (61, . . . , b„) G F^. This is a symmetric bilinear 
form on F". 

Definition 1.7. If C C F^ is a code, then 

:= {u G F^ I (u, c) = for all c G C} 

is called the dual of C. A code C is called self-dual (respectively, self- 
orthogonal) if C = C"^ (respectively. C C C^). 

Definition 1.8. A generator matrix H of C"*- is said to be a parity check 
matrix for C. 

Clearly, a parity check matrix of an [71, k, d] code C is an (71 — fc) x n matrix H 
of rank n — k, and we have 

C = {it G F^ I F • It* = 0} 

1.1.3 Decoding 

We can decode linear codes by so-called syndromes. What syndromes are and 
how to decode with their help will be explained in this section. 
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Definition 1.9. The syndrome s(u) of a vector m € with respect to a code 
C is defined by 

s{u) = u-H^ 
where -ff* is the transpose of the parity check matrix of C . 

By definition of the parity check matrix, we have Wc € C : s(c) = 0, so that we 
can characterize C as C = {u G F^' | s{u) — 0}. 

Remark 1.10. We can divide into cosets according to the syndromes: 

s{u) = s{v) ■i==^ u + C = v + C 

This property holds because as seen above, C is the kernel of the linear map 
that maps every vector to its syndrome with respect to H. We call the vector 
with the smallest weight in every coset the leader. The leader of a coset need 
not be unique. 

Lemma 1.11. For a t- error- correcting code C, every vector, whose weight is 
at most t, is the leader of a coset. This vector is unique and describes the error 
which has happened during the transmission. 

Algorithm 1.12 (Decoding). 1. For a vector x E ¥^ determine its coset 
by syndrome calculations. 

2. Find a leader y of its coset. Note that if the coset leader is unique, the 
decoded vector will be equal to the original one. This is the case if less 
than t + 1 errors occurred in a <-error-correcting code (see Lemma ll. 11(1 . 

3. Decode x by calculating x — y, which is the wanted vector. 

It is known that decision problems corresponding to the general decoding prob- 
lem are NP-hard also to determine the minimum weight is known to be 
NP-hard jHlj. An (inefficient) decoding strategy is to use look-up tables, espe- 
cially if many codewords have to be decoded. An overview of possible strategies 
is given in 

1.2 Example: Hamming Code 

The following example shows how the whole procedure of encoding and decoding 
including error correction described in the previous section works. 

Definition 1.13. The Hamming code C is a [7, 4, 3] classical linear code over 
the field F2. It has dimension 7, encodes 4 bits and has a minimum distance of 
3. That means it can detect 2 errors and correct 1 error. 
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1.2.1 Encoding 

As we have seen above, the generator matrix is a fc x n matrix, so in this example 
we obtain a 4 x 7 matrix. It is defined by 

/ 1 1 1 1 \ 
110 11 
^ ~ 0001111 

\ 1 1 1 / 

This means that our code C is generated by the vectors 

(1,0,1,0,1,0,1), (0,1,1,0,0,1,1), (0,0,0,1,1,1,1), and (1,1,1,0,0,0,0), 

i.e. it consists of all linear combinations of those 4 vectors over F2. 

Now, from the generator matrix G, we can construct the parity check matrix. 
This is an [n — k) x n matrix which consists of the generators of the space 
orthogonal to C. The rows have to be orthogonal to every row of the generator 
matrix {H ■ — 0)- For our code C the following matrix is one example that 
satisfies this condition: 



10 10 10 1 
= ( 1 1 1 1 
1 1 1 1 



If we calculate the matrix product, we get: 



10 10 10 1 
110 11 
1 1 1 1 



/ 1 








1 \ 





1 





1 


1 


1 





1 








1 





1 





1 








1 


1 





V 1 


1 


1 





Transmitting a vector, e.g. (1,0, 1,0), we get its encoding: 
(1,0,1,0)-^ = (1,0,1,1,0,1,0) 



1.2.2 Decoding 

Suppose that a one bit error occurs during the transmission: 

(1,0,1,1,0,1,0)^ (1,1,1,1,0,1,0) 
For error correction we have to calculate the syndrome of the vector: 
(l,l,l,l,0,l,0)-il* = (0,1,1) 
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Now we have to find the leader of the coset (1, 1, 1, 1, 0, 1, 0) + C. To do tliis, 
we use the equation: 

(a,6,c,d,e,/,ff)-H* = (0,l,l) 

This equation has the solution (0, 1, 0, 0, 0, 0, 0). In general we will calculate the 
leaders once and store them in a look up table. As we know from Lemma 15, 
a vector is the unique leader of a t correcting code, if it has at most weight t. 
We have a one error correcting code and (0, 1, 0, 0, 0, 0, 0) has weight one, so it 
is the unique leader. Then we can correct by calculating: 

(1,1,1,1,0,1,0) - (0,1,0,0,0,0,0) = (1,0,1,1,0,1,0) 

This gives us back our original codeword. We only have to calculate the linear 
combination of the rows of G to decode (1, 0, 1, 1, 0, 1, 0), and we get (1, 0, 1, 0). 
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Chapter 2 



Quantum Error Correcting 
Codes 

This chapter gives a brief introduction to quantum information and quantum 
codes. It introduces qudits in general, operations on quantum states, quantum 
error correcting codes, and stabihzer codes. The relation of this theory to phys- 
ical models can be found in Appendix ^ in form of the postulates of quantum 
mechanics. 

2.1 Concepts of Quantum Information 

The mathematical foundation of quantum information theory is linear algebra. 
This section gives the relation between common notations in algebra and its 
corresponding ones in quantum information. 

Definition 2.1. A qubit is the short form for quantum bit and the analog of a 
bit in classical computation. The possible states of a quantum bit are the states 
of the vector space = H. The standard basis of this state space is denoted 

by 




where |-) is called the ket notation. The right side denotes the usual vector 
notation. 

The general state of a qubit is a linear combination 

1^) = a\0)+P\l) 
with a, PeC and \af + \f3f = 1. 

This definition is too restrictive for the following chapters, because the codes we 
are going to construct will be defined over larger alphabet size than two. There- 
fore we have to introduce qudits as the generalisation to non-binary systems. 
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Definition 2.2. A qudit is the generalisation of a qubit. Possible states 
are the elements of the Hilbert space 7Y = The standard basis for this state 
space consists of the elements |0), . . . ,\d—l) and every state can be represented 
as 

i=0 

with X^iLo^ l^^il^ = 1- usual vector notation, every qudit \i) corresponds to 
the i-th vector of unity with one in the j-th component, all other components 
are zero. 

To get consistent definitions and good properties, from now on, we restrict 
ourselves to d = p™ for m E N. 

2TTi 

Definition 2.3. Let = e p be a primitive p-th root of unity, then we define 
the Pauli matrices in the p-aiy case by 

X,\k)^X^k) = \k + j), 

z,\k) = z=\k) = u';-^\k)^ 
i\k) = \k) 

for j,k = 0, ... ,d — 1. 

For d = with to > 2, we have the more general definition 

X,\k) = \k + j), 

z,\k) = ^('^•^^Ifc), 

t\k) = \k) 

with uip — e~ for j, k g F^™ and tr : Vpm Fp the trace map from the finite 
field onto its base field. 

Definition 2.4. The Pauli group for qudits is defined as 

P = (x,z,|z,jeFp™). 

Definition and properties of this group can be found in [101 112| . 

Example 2.5. For the case of qubits we get the well known Pauli matrices 

and the Pauli group consists of the span of these four matrices. It is easy to 
check that these matrices arc all self-inverse. ^ 

If we want to generalise these definitions to systems of more than one qubit 
respectively, qudit, we have to use tensor products of Hilbert spaces in order to 
get quantum registers. 

^Note that in physics literature instead of Y the matrix iY is used which has the advantage 
of being hermitian. However, the vector space spanned over the complex numbers is the same. 
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Definition 2.6. A quantum register is a multiple qudit system. Its state 
\bi ■ ■ ■ bn) is a tensor product of qudits bi € Fpm, i.e. 

\bi---b„) := \bi)(g)---(E)\bn). 



The state of a quantum register is in the space 
be written as 



y^tg^n ^ ^d" ^g^^ 



1^) 



where Cx & C and J2xg¥",„ 1^2:^ = 1- 



To be able to use quantum registers, we also have to generalise the operators 
acting on them. 

Definition 2.7. The Pauli group on a quantum register of length n is the 
tensor product of the Pauli group on single qubits 

Vn {Ui ® ■ ■ ■ Un\U^ e V for i ^ 1, . . . ,n) 

Every operator acts on the corresponding qudit. 

With help of the Pauli group we have already some possible operators that act 
on qudits respectively, quantum registers, but this will not be sufficient for 
circuits that we need for quantum error correction. Therefore we will introduce 
some more important gates. These are defined over F2. 

Definition 2.8. 



• The Hadamard gate H is given by the matrix 



H = 



1 



1 1 



\/2 V 1 -1 

and drawn in the Feynman circuit notation |23j for a qubit |^/;) 



H 



• The controlled-not gate C — NOT is given by the matrix 



C - NOT = 



( 1 








M 





1 

















1 


V 





1 


/ 



and the conventional circuit is denoted by 
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i.e. the C — NOT is a controUed-X gate. 
The controlled-U gate C — U is 
for any unitary transformation U 



• The controlled-U gate C — U is the generahsation of the C — NOT gate 

til U2 
U3 Ui 



and given by the matrix 



C-U = 







/ 1 

1 

Ml M2 

y U3 U4 y 



and the conventional circuit notation is 



u 



The TofFoli gate is a controlled gate with two control and one target bit. 
This three qubit gate is given by the matrix 

/10000000\ 
1 
1 



Toffoli = 



1 

1 

1 

1 

yooooooioy 



and its circuit is given by 



2.2 Error Model and Quantum Codes in Gen- 
eral 

In order to construct quantum error correcting codes, we first have to define an 
error model. An error model tells us what kind of errors appear and what kind 
of errors we would like to detect or correct. 

In the following we will assume that there are no correlated errors, but just 
errors on single qudits. Errors on single qubits in our error model can be any 
linear combination of Pauli group elements. We also assume that every qudit is 
independently affected with the same probability p |15| . 

We can look at errors as the interaction of a state in a state space S with the 
environment Env by looking at the total Hilbert space Ti ~ TLs ® Ti-Env where 
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Tis is the Hilbert space of our system and Heuv is the Hilbert space of the 
environment. Then an error in its most general form is an operator 

E : \i^)s\0)Env ^ ^^a|^)s| O^Env 
ael 

where |a)Eni; are some states of the environment and Ea acts on our state \tp)s 

m 

Definition 2.9. A [[n, k, d]] quantum error correcting code (QECC) is 
a hnear code that encodes k qudits into n c^udits and is able to detect errors 
affecting d — 1 qudits and to correct errors on [^^J qudits. 

We cite the following theorem from [Tl] 

Theorem 2.10. Let C be a subspace of the state space with orthonormal basis 
{|ci), . . . , |ci<-)}. Then C is a quantum error correcting code for the error opera- 
tors £ = {El, . . . , En} iff there are constants oik.i G C such that for all |c,;), \cj) 
and for all Ek, Ei (z £: 

{ci\ElEi\cj) = Si^jOk,!- 

This theorem tells us that errors have to act on the states by mapping them 
into orthogonal subspaces of the state space in order to be able to recover the 
state. 

For our error model it suffices to correct so called dit and phase errors. Dit 
errors are bit flip errors in the binary case and given by the acting of the X 
gate on the state. Phase flip errors occur when the Z operator is applied to our 
state. 

Definition 2.11. A bit flip error is given by the following mapping: 

|0) ^ |1) 
|1) ^ |0) 

Similarly the phase error acts on a qubit: 

|0) ^ |0) 
|1> - -|1> 

More generally dit errors are given by the operators Xa and phase errors by the 
operators Zfj as in Definition 12. 31 

Theorem 2.12. For correction of independent errors on single qudits, it suffices 
to correct dit and phase flip errors, i.e. the set 

V = {Xo,Zp\a,f3 e¥p,^} 

forms an orthonormal basis for the set of matrices acting on one qudit, CP 
with respect to the matrix inner product {A,B) = -^tr{A^B). 
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Proof. If we can show that for aU Ui, I3j e Fpm 
these operators have to form a basis, because 

Let Xa^Zp^ and Xa^Zp^ be two arbitrary elements of P, then 



{Xa^Zp^^Xa^Zp^) — —trl^Xa^Zp^)^ Xa^Zfj^) 

= — tr(^-/32-'^-Q2-'^ai^/3i) 
= — tr(^-/32-'^ai-Q2^0l) 
^ ^tl'(^ai-a2-^/9i-A) 

Note that Zq, has nothing but diagonal terms for any a and X^ has no diagonal 
terms if a ^ 0. So we can conclude 

• if q;i 7^ a2, iT:{Xa^~a-2^l3i-l32) ^ the two elements are orthogonal 

• if ai = a2, 

(XcjZ^jjXa^Z^J ^ — tr(Z;3j_^J 

- if /3i = /32, (X„,Zft,X„,Z^,> = ^tr(l) = ^ -p™ = 1 
Therefore the two operators are orthogonal. 

□ 

In the following we will give an example of a simple quantum code which is also 
known as repetition code. The difference to the classical repetition code is that 
we cannot copy states: 

Theorem 2.13 (No-Cloning Theorem |23| ) ■ It is not possible to copy ar- 
bitrary quantum states. 
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Proof. Assume there exists a unitary operation U that copies arbitrary quantum 
states. Let and |(/)) be arbitrary states. Then 

C/(|^)®|s)) = |V)®|^> 

The inner product of these two equations gives 

im = (^10)2. 

This equation can only hold if {ijj\cl>) = 1 or {ijj\(l>) = 0, i.e. if = \(j>) or if 
and |(/)) are orthogonal. 

Hence cloning of unknown states is not possible. □ 

Therefore we have to use the properties of linear algebra. These examples can 
for example be reviewed in I15j . 

Example 2.14 (Repetition Code for Bit Flips). The easiest way to correct 
one error in classical coding theory is the repetition code, that maps 

^ 000, 

1 ^ 111. 

Decoding is performed by correcting the most likely error. In this case, we will 
decode with the majority principle, e.g. 

001 000, 

de codi ng 



The problem with this code in quantum error correction is that we cannot copy 
arbitrary quantum states (see Theorem 12. 13(1 . However, we can do something 
similar to the classical repetition code. First, we will look at bit flips and imitate 
the classical code. Then in the next example, we will transform the code such 
that it can correct phase errors. 

Let us encode one qubit into three, i.e. 

|0) ^ 1000), 

ll) ^ 1111). 

Then an arbitrary superposition will be encoded as 

a|0)+/3|l) ^ a|000) +/3|111). 

In the following we will assume that a bit flip error occurred on the first qubit. 
This is sufficient, because of the symmetry of the code, all calculations will be 
the same for an error on one of the other qubits. 

An error on the first qubit will map the state a|000) +/3|111) to ajlOO) +/?|011). 
This error can be detected with two ancilla qubits by parity check. Let the 
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m) 

\si) 



|o> — 

|0) — 
|0) — 



Figure 2.1: Encoding and syndrome measurement circuit for the repetition bit 
flip code with code bits [qo) ~ \ip), \qi), \q2) and syndrome bits \sq), \si). 



ancilla qubits be in the state |0), then we use two C-NOT gates on every ancilla 
qubit hke in Figure ITTl and get 



|000)|00) 


^ |000)|00), 


1 100)100) 


^ |100)|10), 


|010)|00) 


^ |010)|01), 


|001)|00) 


^ |001)|11), 


|111)|00) 


^ |111)|00), 


|011)|00) 


^ |011)|10), 


|101)|00) 


^ |101)|01), 


|110)|00) ^ 


^ |110)|11). 



If we measure the ancilla bits, we will deterministically get syndrome bits or 
1 and can uniquely assign it to the single bit flip error that has occurred. 

Example 2.15 (Repetition Code for Phase Errors). The important ob- 
servation for phase correction is that bit flip errors transform to phase errors 
under the Hadamard transformation and vice versa. So we encode 



|0) 
|1) 



1 



/23 



/23 



(|0) + |1))(|0) + |1))(|0) + |1))=: 



+ 



(|0)-|1))(|0)-|1))(|0)-|1))=:| ) 



and a phase error on the first qubit will map 

!+ + +> ^ + 



We can detect these errors by Hadamard transformation to the standard ba- 
sis and the same syndrome calculations as before. Then we apply another 
Hadamard and perform the necessary error corrections. The complete circuit of 
this encoding and decoding process is given in Figure 
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m) 

\l2) 

No) 
\si) 



|0)^ 

|0) — 

|o) — 

|0) — 



H 



H 



H 



H_ 
H 



Figure 2.2: Encoding and syndrome measurement circuit for the repetition phase 
flip code with code bits |(7o) = |V'), I92) and syndrome bits |so), |si). 



The combination of these two codes gives our first quantum code, known as 
Shor code [23], encoding one qubit into nine and being able to correct bit 
and phase flip errors and therefore any error on single qubits. This code is a 
[[9, 1, 3]] code. 

Example 2.16 (9-qubit code). If we concatenate the codes given in Examples 
12.141 and 12.151 we get a code that can correct bit and phase flip errors on one 
qubit. Therefore we encode 

|0) ^ -1=(|000) + |111))(|000) + |111))(|000) + |111)) 

(1000000000) + 1000000111) + 1000111000) + 1000111111) 



V23 

+ 1111000000) + IlllOOOlll) + IllllllOOO) + lUllllUl)) 

= |0) 

|1) ^ -i=(|000)-|lll))(|000)-|lll))(|000)-|lll)) 



(1000000000) - 1000000111) - 1000111000) + 1000111111) 



/23 

-IlllOOOOOO) + IlllOOOlll) + IllllllOOO) - 1111111111)) 

11) 



Then bit flip errors can be corrected in blocks of three qubits, phase flip errors 
in the comparison of the three qubit blocks. The circuit for this encoding is 
given in Figure 



2.3 Stabilizer Codes 

Stabilizer codes were introduced by Daniel Gottesman jHj . This type of quantum 
error correction is very useful since it allows us to reuse results from classical 
coding theory and to describe a large class of quantum codes. 
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qo) 


= m 


Qi) 


1 n\ 

= |o) 


92) 


1 n\ 

= |o) 


93) 


= |o) 


94) 


= |o) 


95) 


= |0) 


96) 


= |0) 


97) 


= |0) 


98) 


= |0) 



H 



H 



-©- 



Figure 2.3: Encoding circuit for [[9, 1, 3]]-Code 



2.3.1 Basic Definitions 



In the last section we saw that it is sufficient to correct dit and phase errors. 
The idea of a stabilizer code is to define a commuting set of Pauli operators and 
use the set of states that is invariant under these operators as code space, i.e. 
the code is the +1 eigenspace of all the operators. 

Recall that two operators E, F commute iff EF = EE. 

Definition 2.17. A Stabilizer code S of length n is an Abelian subgroup 
of the Pauli group Vn- Codewords are the states of the state space that are 
invariant under all elements of S. 

Remark 2.18. An important feature of stabilizer codes is that the stabilizer 
forms an Abelian group. Error detection and correction takes place by measur- 
ing commutation and anti-commutation of operators. 

First we will look at the commutation behaviour of single qudit operators in 
the p-ary case. It is easy to show that X" commutes with X^. Similarly Z" 
commutes with Z^. 

The problem is what happens with X" and Z^ . It suffices to show what happens 
with X and Z, because we can split X" into X ■ X ■ ■ ■ X . In general, in case p 
prime X is given by the matrix 



X 



/ 

1 

1 

V 



1 \ 





1 oj 
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The matrix for Z looks like 



1 




V 



\ 





V 



p 



Then 





/ 


• 







\ 




1 


• 










xz = 

















V 


• 







/ 



and 



ZX 



/ 

Up 




1 \ 





ujpXZ. 



Ijj, 



\ 

So we get for X" and Z'^,a,f3 e¥p 

In the case of a field F^m we get for a, /? g Fpm 

Since we have defined the commutation rules on a single qudit operator, we can 
generalise this to operators on quantum registers. Hence for two operators 



Ul — Xa-i Zp-^ 

we have that 



'Xa^Zfj^, U2 — X^-^Z^ 



U2-Ui 



Ui-U2 



in case p prime and therefore two operators commute iff 

n 



In the case of a field F^m with m > 2. we get 



U2-U, = C.?--*'-^"''''-'^'^'Vl.C/2 



^2 • 1^1 — 

and therefore two operators commute iff 
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Corollary 2.19. Let S be a stabilizer, i.e. an Abelian subgroup of Vn- If a 
state lip) is in the +1 eigenspace of a set of generators {Gi, . . . , G;} of S, it is 
an eigenstate of all elements in S . 



Proof. An arbitrary element F G S* is a linear combination of the set of gener- 
ators: 

F\^) = (Gf •••GfOI^> 

= m 

for any lip) that is in the +1 eigenspace of the set of generators and ai G Fpm 
for all i. Therefore 1-0) is in the +1 eigenspace of F. □ 

Lemma 2.20. The stabilizer S of a stabilizer code is an Abelian group, i.e. all 
stabilizer elements commute. 

Proof. Assume that not all of them commute, then there exist E, F S with 
EF = ijjpFE where a 7^ 0. So all states in the code satisfy 

IV;) = EF\i,)^u:;FE\i:) 

So it has eigenvalue +1 and uj^ at the same time and therefore contradiction. □ 

Since we have seen that it suffices to look at a set of generators, we can represent 
a stabilizer code in an easier way: 

Definition 2.21. A generator matrix Q oi& stabilizer code is an I x 2n- matrix 

Q = {X\Z) 

where the first n components represent the X errors, the second n components 
the Z errors. This matrix defines a [[n, k, d]] quantum error correcting code 
with k = n — I. 

Lemma 2.22. Elements x = (xi, . . . , X2n), y = (j/i, • ■ • , y2n) of the Pauli group 
commute in the vector representation, i.e. {xi, . . . , X2ri) means X^-^Z^^^-^ <E) - ■ 

XxnZx2„, if 

n 

(X, y)s = ^ Xiyn+i - Xn+iVi = 0. 
i=l 

We call {x,y)s the standard symplectic inner product. 

Proof. A vector (xi, . . . , X2n) in this representation denotes the operator 

Xx,Zx„ + ,(^---®Xx„Zx,_„. 
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Therefore we get 



(Xyi Z, 



,tr(0) 



XxnZx2n){'^yiZyn+i ® ' ' ' ® -^y^^y^n) 



= {X^.Zx^^, ® • • • (g) Xx^Zx^J{Xy,Zy^^, d) ■ ■ 
and therefore the operators commute. 

Example 2.23. If S is generated by XYI ^ X(g)Y(g)l and ZXX = Z( 
over F2, the generator matrix is given by 





1 





1 






1 1 


1 





s) 



Let X = ( 1 1 I 1 ) and y = ( 1 1 | 1 ) , then 

{x,y)s = (1 • l + l-O + O-O)- (0-0 + 1 • 1 + 1-0) 

= 1-1=0 



□ 

)XdX 



We aheady introduced the 9-qubit code in the previous section. In the foUowing 
we give a description in terms of stabihzers. 

Example 2.24. 9-qubit code 

The 9-qubit code encodes one qubit into 9. Therefore our generator matrix will 
have size 8 x 18. 

Claim 



G = 
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1 


1 
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1 
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1 


1 











1 1 


1 


























0/ 



is a generator matrix for the stabilizer code of the 9-qubit code. 

Proof. It is easy to check that the codewords are invariant under Q and as Q 
has rang 8, it has to be a generator matrix for the code. □ 
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2.3.2 Error Detection and Correction 



Like in classical coding theory we can detect and correct errors by syndrome 
measurements, but in the quantum case we are not allowed to measure the state, 
because this in general will destroy the superposition (see ^ . 

Definition 2.25. An ancilla qudit is an extra qudit that is used during com- 
putations, but is not part of the input or output, and is prepared in some fixed 
state, usually |0). 

Before we can introduce error correction and the amount of errors we can correct 
and detect, we have to define some more terms like weight and distance for 
quantum codes. 

Definition 2.26. The weight wt of an operator [/i (8) • • • C/„ is the number 
of elements Ut that are not equal to the identity, e.g. 

X®]l®l(g)Z(g)Z 

has weight 3. 

In classical coding theory the distance of a stabilizer code (which is a linear 
code) would be the minimal weight over all codewords. In the quantum case 
this docs not hold like that, because we have to detect different types of errors. 

Definition 2.27. The normalizer N{S) of a stabilizer S is the set of Pauli 
operators that commute with all stabilizer elements. 

N{S) ^ {F eVn\ EF ^ FE ^E e S}. 

This definition allows us to distinguish between three different types of errors. 

Lemma 2.28. Let F G Vn be an error operator. Then the following three cases 
are possible: 

1. If F lE S nothing happened to the code. 

2. If F € Vn\N(S) the error is detectable and can be corrected with the most 
likely error principle fsee \l.lOl and \l~n\} . 

3. If F € N(S)\S the error cannot be detected and therefore is not cor- 
rectable. 

Proof. Let be any element of the code. Then E\ip) = for all E E S. 

1. If F e 5, we get for all codewords 

F\i;) = |V> 
and nothing happens to the codeword. 
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2. IfFe Vn\N{S) for allEe S 

Therefore the faulty codeword is in the eigenspace and detectable by 
syndrome measurements. With the method introduced in Chapter ^ it is 
correctable up to half the distance. 

3. If G N{S)\S for all £; e S* 

E{Fm ^ {EFm^{FEm 

and so wc cannot detect the error by syndrome measurement, because 
is also in the +1 eigenspace. 

□ 

This lemma allows us to introduce the distance of a stabilizer code. 

Definition 2.29. The distance d of a quantum stabilizer code C is the mini- 
mum weight of all normalizer elements that are not in the stabilizer. 

d = iTun{wt{x)\x & N{S)\S}. 

In other words, if we denote the normalizer as the set of all operators that 
commute with all elements in the stabilizer, then the normalizer is equal to the 
dual code C^' with respect to the symplectic inner product (, )s. We obtain 
that 

d = jmn{wt{x)\xeC^'-\C]. 

To be able to correct errors smaller than [^^^J as in classical coding theory, we 
can use syndrome measurements. 

Algorithm 2.30. 

1. Let xi, . . . , a;; be the generators of the stabilizer code, i.e. the rows of the 
generator matrix. 

2. Prepare I ancilla dits in the |+) — :^(|0) + |1)) state. Every ancilla bit 
corresponds to one stabilizer generator. 

3. Perform controlled operations for every stabilizer generator as in Figure 
O i.e. if 

perform controlled operations on the jth qubit. 

4. Measure the ancilla dits. The results are our syndromes. 
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Figure 2.4: Example of a syndrome measurement in case where the stabilizer is 



given by the two generators 



(1) 



\Q2) = |o) — 
\so) = |0) — 

ki) = |o) — 



U'^^^ and Jjf ^ 



• ® U, 



(2) 



X 



X 




Figure 2.5: Example of an error correction without measurement 

5. Use classical theory (see Chapter^ to determine the errors. 

6. Apply the necessary gates to correct the errors. 

Note that this algorithm uses measurements and error detection and correction 
are assumed to be perfect. Algorithm 12.301 is not fault-tolerant, however, it 
has been shown how to make syndrome measurements fault-tolerant for any 
stabilizer code One example how to omit measurements is given by Example 
ion below. 

Example 2.31. In Example 12 . 1 41 we saw how to correct bit flip errors. In order 
to be able to locate errors, we had to measure the syndrome bits. An automatic 
error correction can be achieved by the circuit given in Figure 12.51 There we 
use a Toffoli gate to correct errors. 

A correction without measurement is in general possible if we use fresh ancilla 
qubits every time error correction is performed (see Box 10.1 in J23'). 



2.3.3 Weighted Symplectic Inner Product 

In the following chapters we will see that our construction does not always give 
codes that arc orthogonal with respect to the standard symplectic inner product. 
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However, we can construct codes C which are orthogonal with respect to 

c 
i=0 

for all x,y G C and all 7^ 0. We will call it weighted symplectic inner 
product. 

The following lemma shows that we can construct a stabilizer code with respect 
to the standard symplectic inner product with the same properties as the old 
one with respect to the special symplectic inner product. 

Lemma 2.32. Let C be a linear code over Fpm which is self-orthogonal with 
respect to the weighted symplectic inner product ( , )° and has a corresponding 
quantum code with parameters [[n, k, d]] and generator matrix 



I Cli ••• 



Q = 



Cl,n 



Then the code C with generator matrix 



CLn+1 



Cl,2ri 



Q.2r: 



ai ■ ci,i 



a-i ■ cii 



a-n ■ Cl. 



Cl,Tl + l 



Q,n+1 



Cl,2i^ 



C;,2n 



where the Cij are the elements of Q , defines a stabilizer code with respect to the 
standard symplectic inner product ( , )s with the same parameters [[n, fc, d]]. 

Proof. It is easy to show that Q' defines a stabilizer code with respect to the 
standard symplectic inner product: 

Let X = (aixi, . . . ,a„a;„,x„+i, . . . ,a;2„),?/ = (aiyi, . . . , a„2/„, ?/„+i, . . . , y2n) € 
C", then 

n 

{x,y)s = ^{oiXi) ■ yn+i - Xn+i ■ [oiyi) 



^ ^ (^i {Xi y^i+i Xji+i yi) 
i=l 

= ((a;i,...,a;2„),(yi,...,y2n))s 
= 

because (xi, . . . , X2n), iui, ■ ■ ■ 1 y2n) G C and C is a stabilizer code with respect 
to ( , Therefore C" is a stabilizer code. 

The reason why the parameters [[n, fc, d]] do not change when going to Q' is the 
following: 

• The code length n stays the same, because all codewords still have the 
length 2n. 
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• The number of encoded qudits also does not change, because G' ~ G ■ D 
where D = diag(ai, . . . , a„, 1, . . . , 1). Smce D E GL(27i, Fpm), we have 
that G and G' have the same rank. 

• The distance d of the code could only change, if the weights of the normal- 
izer elements change. This is not possible, because all coefficients Ui 
and ¥pm is a field that has no zero divisors. Therefore the weights stay 
the same and the distance of the code, too, because 

d = ijim{wt{x) \x & N{S)\S}. 

□ 

The following example illustrates the construction. 

Example 2.33. Let be a generator matrix for a stabilizer code over F5 with 



G = 



10 14 
4 110 



2 4 
2 3 3 



This code is self-orthogonal with respect to the symplectic inner product 

= '^{xiy5 ~ X5yi) + l(x2ye - xey2) 
+l(a;32/7 - 3:72/3) + 4(a;4?/8 - xsVa)- 

Indeed, we obtain that 

((1,0,1,4,0,0,2,4),(4,1,1,0,2,3,3,0)): = 2(1 • 2 - • 4) + 1(0 • 3 - • 1) 

+ 1(1 -3- 2-1) +4(4- 0-4-0) 
= 2-2 + 1 
= 0. 

We can now apply Lemma 12.321 to get the new generator matrix 
G' = 



2 11 

3 110 



2 4 
2 3 3 



With the standard symplectic inner product we get 

((2,0,1,4,0,0,2,4), (3,1,1,0,2,3,3,0)), = (2 - 2 - - 3) + (0 - 3 - - 1) 

+ (1-3- 2-1) + 4(1 -0-4-0) 
= 2-2 + 1 
= 

and therefore orthogonal vectors. 



2.4 CSS Construction 

One idea of how to use classical codes for quantum codes was introduced by 
Calderbank, Shor and Steane |51 EHl- Therefore the construction is known as 
the CSS construction. 
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Theorem 2.34. Let Ci = [n, ki, di]^ and C2 = [n, fc2, £^2]^ be classical error 
correcting codes over ¥q for which Ci C holds. Let Qi respectively G2 be 
their generator matrices. Then C defined by the generator matrix 



Qi 






Q2 



defines an [[n, n — (fci + fc2), > min(di, ^2)]]^ quantum error- correcting code C 
over ¥q. 

Proof. The idea of this construction is that the condition Ci C suffices to 
make the quantum code self-orthogonal with respect to the standard symplectic 
inner product. This condition is proved in the following. 

For a;, y £ C, we have to check the different cases: 

n 

((a;i,...,a;„,0,...),(yi,...,y„,0,...))s = ^Xi-O-O-y^^O 

i=l 
n 

((0, . . .,Xn+l, ■ ■ ■ ,X2n), (0, . . . ■ . ■ ,2/2ii)>s = ' Vn+i " Xn+i '0 = 

i=l 
n 

{{xi,...,Xn,Q,...),{Q,...,y,i+l,...,y2n))s = ^Xiyn+i-0-0 



EC1CC2 
Xiyn+i = 



Therefore all codewords satisfy the symplectic inner product and C is a stabilizer 
code. 

The properties of the quantum code are the following: 

• The codeword length is n, because the generator matrix has length 2n. 

• Ci has dimension fci, C2 has dimension k2. Therefore Q has ki + k2 rows. 
The dimension of the stabilizer code is n minus the number of rows of the 
generator matrix and so A: = n — (fci + ^2) 

• The distance of the code cannot become smaller than the smallest one of 
the classical codes and therefore d > min((ii, ^2)- 

□ 

Example 2.35. Let Ci be a classical [3, 1, 3]y code generated by 

^1 = ( 3 3 4 ) 
and C2 a classical [3, 1, 3]y code defined by 

^2 = ( 5 3 1 ) 
over F7. Then is generated by 

12 3 
2 1 1 
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because 



02- 



( 



1 2 

2 1 

3 1 



) 




) 



(0 0). 



Since 



(3,3,4) 



(l,2,3) + (2,l,l)eC2^, 



we have that Ci C C2 and we can apply the CSS construction. Hence we get 
a [[3, 1, 2]] quantum code C generated by the matrix 



For later constructions we need a theorem of for a special CSS construction. 
Since Matsumoto works in [201 with C 3 and not C C like usually 

done, the following theorem is stated the other way round. In general, it does 
not matter, which way around we construct it, because {C-^")-^' = C. Then we 
just have to use the dual code for constructions. 

Theorem 2.36 ([IJ). If there is an (n + k)- dimensional subspace C C F^" such 
that C 'D C"*"', then we can construct a \_{d{C\C'^'') — l)/2\-error-correcting 
quantum code Q C of dimension (p™)'^, where 




3 3 4 
5 3 1 



mm 



{wt{x) I X e C\C-L=}. 
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Chapter 3 

Algebraic Geometry 



This chapter gives an overview over the basics of algebraic geometry which we 
need for the later constructions of quantum error correcting codes. It is rather 
technical but lays the foundation for a general method to generate symplectic 
self-orthogonal codes over finite fields. 

3.1 Introduction to Algebraic Geometry 

The theory of algebraic geometry (AG) which includes algebraic curves and 
algebraic function fields, is a very complex and technical, but powerful theory. In 
this section we will give a brief introduction containing all main results necessary 
for quantum AG codes. We use notations, definitions, and theorems mainly from 
HOI, but also from d, and |2T]- 

3.1.1 Plane Curves 

Definition 3.1. A plane curve over a field K is the set 

where / is a polynomial with coefficients in K. The elements of T{K) are called 
AT-rational points of T. A projective plane curve T is defined by 

t = ff^ {(Xo : Fo : ^o) e F2(C) | /(AcFcZq) - 0} 

where f{X,Y,Z) G C[X,Y,Z] is a homogeneous irreducible polynomial. ("Ir- 
reducible" means that / cannot be written as a product of two polynomials 
where each has degree > 1. C[X,Y, Z] is the polynomial ring over the complex 
numbers.) 

Example 3.2. Take y'^ = x{x - 1)(.t -|- 1), then Tf = {(x,j/) e | fix,y) = 
x{x — 1)(.T + 1) — j/^ = 0}. We cannot plot the graph of this curve, but if we 
take {{x,y) G | f{x,y) = 0} instead of r/(C), we get the graph drawn in 
Figure O 
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Figure 3.1: Example of the elliptic curve = x{x — 1)(.t + 1) over R. 

In the compactification the curve can be identified with a torus. The given curve 
is an example of an elliptic curve. 

Remark 3.3. In this example we see that it might be difficult to look at a 
curve over an arbitrary field, because we do not have a connected graph like 
in M or C. However, we can carry the essential properties of curves over to 
arbitrary fields. To this end we first establish an equivalence between algebraic 
curves and algebraic function fields in one variable. These fields are much easier 
to handle than the curves. Because of that, in most cases, the construction of 
codes will be over algebraic function fields, however we start the constructions 
with an algebraic curve. 

3.1.2 Coordinate Rings and Function Fields 

Definition 3.4. A point on a projective curve f = {(X, F, Z) \ f{X, Y, Z) = 0} 
is called singular, if all partial derivations of / are equal to zero. Otherwise it 
is called non-singular. 

Definition 3.5. Take an irreducible homogeneous polynomial 



/(x,y,z)e/v[x,r,z]. 

Two polynomials g{X^Y,Z),h{X^Y,Z) g K[X,Y,Z] are called congruent 
modulo f{X, y, Z), if there exists q{X, F, Z) e K[X, Y, Z] such that 

gix, r, z) - h{x, y, z) = qix, r, z)f{x, y, z). 

We denote this by g{X,Y,Z) = h{X,Y., Z) {-mod J {X,Y, Z)). 
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Definition 3.6. Let t = {{X : Y : Z) e F^{K) \ f{X,Y,Z) = 0}, where 
f{X,Y,Z) G K[X,Y,Z] is an irreducible homogeneous polynomial. Then we 
call 

i?(f) = K[X,Y,Z]/if{X,Y,Z)) 

the coordinate ring of F. It can be split up into "d-homogeneous" parts Rd, 
i.e. R{T) becomes a graded ring [HJ 1.1.5] and can be written as 

oo 

Homogeneous polynomials of the same degree belong to the same Rd, e.g. X, 
Y, and X + Y G Ri- If we take X,Y,Z as new variables of the congruence 
classes modulo f{X, Y, Z), then we can denote R{T) by K[X, Y, Z\. Since i?(r) 
is a graded ring, we can take the quotient field and define: 

Definition 3.7. The function field A'(r) of a projective curve F is defined by 
A'(f) = Quot/(i?(f)) 

Example 3.8. Let f{X,Y, Z) = X^ + — be a homogeneous polynomial 
over the complex numbers. Then f{X, Y, Z) defines a sphere in P^. 

The polynomials g{X,Y,Z) = X^ + Y"^ and h{X,Y,Z) = Z"^ arc congruent 
modulo f{X, Y, Z), because 

g{X,Y,Z)-h{X,Y,Z) = X^+Y^-Z'^ 

= l-f{X,Y,Z). 

Hence i?(f ) = C[X, Y, Z]/{f{X, Y, Z)). 



3.1.3 Valuation Rings 

The idea of valuations is to capture the multiplicity of zeros and poles of func- 
tions. We will first look at an example which illustrates the meaning of the term 
"valuation". 

Example 3.9. Let F be a projective plane curve. Take a point P e F and 
define 

Op{t) = {(^ € K{t) I if is defined at P}. 

If P is non-singular (see Definition EH) we have that A' ^ Op(f) ^ K{V). The 
latter chain of inclusions is strict because 

• The constants are defined at P, but there are functions which arc not 
constant, e.g. those with zero in P, and are as well defined at P. 
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• But on the other hand, not all functions are defined at P because there 
exist functions that have a pole in P. 

Furthermore, if ^ e K{r), then (p e Op(r) or ip^^ <E Op(f ). Indeed, if a 
function is not defined at P, then it has a pole there. If a function has a pole at 
a certain point P, then its inverse has a zero at that P and therefore its inverse 
is defined at P. 

The previous example shows how to think of a valuation ring in terms of alge- 
braic curves. In the following we define a valuation ring in terms of algebraic 
curves. 

Definition 3.10. A valuation ring is a subring O C K{r) with the properties: 

1. A' ^ O ^ K{t) 

2. If (y9 e A'(f), then Lp e O or p-'^ e O. 
We cite the following theorem from [201 B.IO]. 

Theorem 3.11. Let T be a non-singular projective plane curve. Then there 
exists a one-to-one correspondence between the points of T and the valuation 
rings of K{T) over an algebraically closed field K : 

{points o/f} ^ — ^ {valuation rings if(f)} 
P ^ Op{f) 

This theorem establishes a connection between the points on plane projective 
curves and the valuation rings in function fields |21l Thm. 1.1]. 

Using this correspondence of points on a curve and its relation to valuation 
rings, we can look at a more abstract theory which leads to divisors and the 
theorem of Riemann-Roch: 

Definition 3.12. An algebraic function field of one variable F/K is a. field 
extension of K such that F is an algebraic extension of K{x) where x € F \s 
transcendental over K. ( Recall that algebraic means that every z € F is zero 
of a polynomial over K{x) ^1 Chapter V.l]. An element x is transcendental 
over K if there exists no polynomial / over K such that f{x) =0 [Ifil Chapter 
II.3].) 

Definition 3.13. A valuation ring of the function field F/K is a ring O with 
the following properties: 

1. K'^O'^F 

2. for any z G F we have that z e O or z^^ £ O. 

Definition 3.14. A place P of the function field F/K is the (unique) maximal 
ideal of a valuation ring O of F/K. We define: 

Ff = {P \ P is a place of F/K} 
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Definition 3.15. Let P be a place in Vp- Let < e O be such that t - O = P. 
For every P E¥p we define a valuation vp by 

VP : F ^ ZD {00} 

J 71 if z 7^ 0, z = u a unit 
1 00 if z = 0. 

Definition 3.16. Fp Op/P is called the residue class field of P. The 

following map is called the residue map with respect to P: 

F ^ FpU {00} 

^ ^ f ^(P) if z e Op 

[ z(P) = 00 otherwise. 

Definition 3.17. The index [Fp : K] of the field extension Fp/K, K regarded 
as a subfield of Fp, is called the degree of P. In symbols degP = [Fp : K]. 

If P is rational, i.e. degP = 1, then [Fp : K] = 1 and therefore Fp = K, what 
is important for Goppa codes because then Fp is not a base field extension and 
we get codewords over the field we started with. 

Example 3.18. Let K = F2, let K{x) be the rational function field, and observe 
that the polynomial x + 1 has a zero at 1. Hence K[x] is a valuation ring if 
X is not infinity. Hence K[x]/{x + 1) = F2 because x + 1 = and therefore 
x = -1 = 1. 

If we have a polynomial 

h{x) = {x + lfg{x) 

with {x + 1) ^ g(x), then 

V(x+i){h{x)) = k. 

3.1.4 Divisors 

Definition 3.19. A divisor D is a formal sum D = J^pePf ''^p-^ with np £ Z, 
where almost all^ jip ~ 0, P G Pp. A divisor of the form D = P with P E Fp 
is called a prime divisor. We add two divisors D = J^pgPf ''^pP ^'^d D' — 
J^pePp ^'pP follows: 

D + D' -.^ {np + n'p)P 

The divisors form a group denoted by Vp = {A | A is divisor over F/K}. 
Furthermore, we define a partial order on the divisor group "Dp by 

D <D' :^=^ vp{D) < vp{D') VP G Pp. 

The degree of a divisor D = X^pePj? npP is given by the following formula: 

deg D = ^ n p deg P. 

PGPf 

^Recall that almost all means all but a finite number llbl Chapter I.l]. 
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3.1.5 Theorem of Riemann-Roch 



The theorem of Riemann-Roch is an important result, since it estabhshes a 
relation between the dimension (see Def. I3.24|) and the degree of a divisor. It will 
help us in the following chapters to estimate the properties of our constructed 
codes. 

Definition 3.20. Let x G ^^yjO}. Wc define the principal divisor [x) of x by 

{x) := vp{x)P 

P6Pf 

It is known that principal divisors have degree |3D1 Corollary 1.4.11]. We define 
the pole divisor (a;)oo by 

(a;)oo := - vp{x)P 



Example 3.21. Let 



PGPp., vrix)<0 



{x + l){x-2) 



(x2 + 2)2 



be an element of M.{x). This fimction has roots in -1, 2 and a double root 
in infinity because it has a double pole at infinity in the enumerator and a 
fourfold pole in the denominator. The function has a double pole in (x^ + 2) 
because this polynomial is irreducible over the reals. Hence the principal divisor 
corresponding to f{x) is given by 

(fix)) = + P(x-2) - 2Poo - 2P(,2+2) + 4Poo 

= P(x+1) + P(x-2) - 2P(a;2+2) + 

where (x + 1), (x — 2), (x^ + 2), and (j) are the irreducible factors over M and 
the corresponding places. 

Furthermore 

deg(/(x)) = deg(P(,+i)) + deg(P(,_2))-2.deg((x2 + 2)) + 2.deg(Poo) 
= l + l-2-2 + 2-l = 0. 

Definition 3.22. For any AeVp set 

C{A) {x e P I (x) > -A} U {0}, 

then C{A) is a vector space over K j3()l Lemma 1.4.6]. 

Example 3.23. Let Pi, P2, P3, P4 be places of a function field and 

A = 2P1 + P2-P3 
a divisor, then the following (.x) are examples of principal divisors in C{A): 
(x) = -2Pi + 2P3, 

{x) = -P1-P2 + P3 + P4, 
(x) = 0. 
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Definition 3.24. For A E Dp we define dim A = Am\C{A) and call it the 
dimension of A, where dim£(A) is the dimension of the vector space C{A) 
over K . The genus g oi F/K is defined as: 

g := maxjdeg A - dimA + 1 I A e Pf}- 

For a non-singular projective plane curve defined by the irreducible homogeneous 
polynomial f{X,Y, Z) of degree d, we can calculate the genus by the following 
formula [El 1.7.2] 

{d-l){d-2) 
^ " 2 ■ 

We cite the following lemma from |3UI Cor. 1.4.12]: 

Lemma 3.25. Let A he a divisor, then holds: If dcg A < then dim A = 0. 

Theorem 3.26 (Riemann-Roch (201 Thm. 1.5.15]). Let F/K he an alge- 
hraic function field in one variahle. 

L For any A CzVp, dim A is finite. 

2. For any A Cz Vp we have 

dim A = deg A+l - g + dim(W - A) 

for g the genus of F/K and W any divisor of degree 2g — 2 called a 
canonical divisor. 

3. If A ^Vp is of degree > 2g — 1, then 

dim A ~ deg A + 1 — g. 

An important theorem for valuations and approximations is the following that 
we cite from [HOI Theorem 1.6.4]: 

Theorem 3.27 (Strong Approximation Theorem). Let F/K he an alge- 
hraic function field in one variahle. Let S ^ Pp he a proper suhset ofPp and 
Pi, . . . ,Pr € S. Suppose we are given xi, . . . , Xr G F and ni, . . . , G Z. Then 
there exists an element x £ F such that 

vp-{x ~ Xi) = Hi (i~l,...,r), and 

vpix) > for allP e S\{Pi,...,Pr}. 

3.1.6 Differential Forms 

Definition 3.28. The adele space Ap of F/K is defined by 

Ap ~ {a = (ap)pePF ] ap G F and vp{a) := vp{ap) > for almost all 

P e Vp}. 

Define also Ap{A) ^ {a G Ap \ vp{a) > ~vp{A) for aU P e Fp}. 
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Definition 3.29. A Weil differential 77 of F/ K is a i^-linear map rj : Af K 
that vanishes on Af{A) + F for some divisor A E Dp- Define ^Ip to be the set 
of all Weil differentials and 

ilF{A) := [i] e rip I 77 vanishes on Af{A) + F}. 

For each 7^ e f2p we can find a unique divisor W = (r/) e Pp called the 
canonical divisor with the following properties [301 Def. 1.5.11]: 

1. 7] vanishes on Af{W) + F. 

2. If 77 vanishes on AfHA)) + F, then A < (rj). 

Canonical divisors have degree 2g — 2 where g is the genus of F/ K Corollary 
1.5.16]. 

Definition 3.30. To define the residue of a Weil differential G fip we need 
the following: For a given place P e Pp, we take an element t which is P-prime. 
Then for z G F , we can find € K and n G Z such that 

00 

z = ajf. 

i—n 

This representation is unique and is called the P-adic power series expansion 

and can be compared to a Laurent expansion in complex analysis. We define 
the residue of z with respect to P and t as 

resp,t (z) := a_i. 

Note that fip is a one-dimensional vector space over F and every differential 
77 can be written in the form rj = zdt |3UI Prop. 1.5.9]. The residue of a 
differential 77 G Op with rj ~ z dt is defined as 

resp (77) := rcsp^t (z) . 

Example 3.31. The theory of residues and differentials is equivalent to the one 
known from complex analysis if the field K = C [301 Chapter IV]. To give an 
example of a residue, let 

77 = — dx 

X 

be a differential over R(a;). Then 

resp=i (77) = resp=i,:r = 1. 

3.1.7 Algebraic Field Extensions 

To get good codes in the proceeding chapters, we need to modify the algebraic 
function field and the places. This will be done by field extensions. In the 
following we give an overview of extension fields and how to create a whole 
sequence of extensions, called a tower of function fields, that can be used for the 
construction of asymptotically good codes. 
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Definition 3.32. An algebraic function field F' / K' is called an algebraic 

extension of an algebraic function field in one variable F/K , if F' D F is an 
algebraic field extension and K' I) K. It is said to be Galois if for any z G F' 
the minimal polynomial f{X) E F[X] splits completely into different linear 
factors over F' . For a Galois extension we define the Galois group Gal{F' / F) 
to be all automorphism on F' that do not move elements of F. The fixed field 
F"' of an automorphism a G Gal(F'/F) is given by 

{zeF'\a{z) = z}. 

Definition 3.33. An Artin-Schreier Extension is a field extension F{'y)/F, 
charF = p, where 

7^ — 7 = c G F, and —a \l a G F. 

Definition 3.34. Let F' /K' be an algebraic extension of F/K . A place P' E 
Pf' is lying over P e Pf if F = F' n F. In this case we write F'|F. It is 
known that there exists an integer e(F'|F) such that 

vp,{x) = e{P'\P) -vpix) 

for aU a; e F Prop. III.1.4]. This number e(F'|F) > 1 is called the 
ramification index of F. The pair F'|F is said to be ramified if e(F'|F) > 1, 
it is said to be unramified if e(F'|F) = 1. A place F is totally ramified if 
there is only one extension F' of F with e(F'|F) = [F' : F]. 

We cite the following proposition from Prop. III. 1.7]: 

Proposition 3.35. Let F' / K' be an algebraic extension of the algebraic Junc- 
tion field in one variable F/ K . Any place P G Pf has at least one, but only 
finitely many, extensions P' G Pf' 

Theorem 3.36 (|3Sl Thm. III.l.ll]). Let F' / K' be a finite^ extension of 
F/ K , P a place of F/K and Pi, ... , Pm all the places of F' / K' lying over P 
with f{Pi\P) = [F'p^ : Fp]. Then 

in 

Y,e{P,\P)-f{P,\P) ^ [F':F]. 

Example 3.37. This example shows how we can use the theorem above to 
calculate the possible number of places lying over a place F, if we know the 
degree of the field extension F'/F. 

If [F' : F] = 2, we have three different kinds of places F in F: 

1. F is ramified, hence e(Fi|F) > 1 for all F^jF. Therefore there exists only 
one place F'|F with 

e(F'|F) = 2 
/(F'|F) - 1. 

^Finite extension means an algebraic extension of finite degree, i.e. [_F' : _F] < oo Def. 
III. 1.1]. 
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2. P is unramified, hence e{Pi\P) = 1 for aU Pi\P. Therefore there exist two 
possibiUties how to spht 2: 

(a) There exists P'\P with f{P'\P) = 2, then there is only one place 
lying over P and 

e{P'\P) = 1 
f{P'\P) = 2. 

(b) For all places Pi\P holds f{Pi\P) = 1, then there are two places Pi 
and P2 lying over P with 

e{Pi\P) = 1 

f{P^\P) = 1 

and 

e{P,\P)-f{Pi\P) + e{P2\P)-f{P2\P) = 2 = [F':P]. 

Theorem 3.38. VFe define the different exponent d{P'\P) of a place P' lying 
over P according to Dedekind's Different theorem \3(\ Thm. III. 5.1]: 

1. d{P'\P) ^ e{P'\P) -1 iff charA' /e(P'|P) 

2. d{P'\P) > e{P'\P) - 1 otherwise 

For a more precise definition see \31A Def. III. 4. 3]. Furthermore we define the 
different 

Diff(P7P) := J2 T.diP'\P)-P'- 

PePp P'\P 

Example 3.39. If we continue with Example l3 . 371 and assume that char K ^ 2, 
we can calculate the different exponent explicitly with the help of Dedekind's 
different formula: 



diP'\P) = I 



1 if P ramified 
otherwise 



and the different of the field extension is given by 

Diff(P7P) = 1 • P' 

P' with e{P'\P} = l 



3.1.8 Towers of Artin-Schreier Extensions 

This section presents some results of [7j on Artin-Schreier extensions. 
Definition 3.40. A tower of Artin-Schrcicr extensions is a set of function fields 

F52 C Pi C P2 C P3 c • • • 
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where Fi :~ F^2(a;i) is the rational function field over F^2, q = p™, p a prime, 
m > 1, and 

Fn+l '■= Fn{Zn+l). 

Here Zn+i is defined by the equation 

7'' -1-7,1 — r«+l 

and 

Xn ■■= G Fn, n>2. 

^n— 1 

The goal of this section is to determine the ramification index of all the places 
in every extension. To this end we have to define the following hierarchy of sets. 

Definition 3.41. Let Q„ G Pf„ be the unique place which is a common zero 
of the functions xi, Z2, . ■ . ^ Zn Lemma 2.3]. 

1. For n > 2, let 

5*^"' := {P ^¥F,^Pr^Fr,-l=Qn-l and P ^ Q„} 

2. For 1 < i < [^J, let 

st"^ := {pePFjPni^„_iesf"7')}. 

3. Let Poo G denote the pole of xi in Pi, 

S'(^) := |Poo}and5(2) :={PePFjPeS'^^'orPnPieS'(^)} 

4. For n > 3 and n odd, define 

S"'"^ := {pePF„ |PnP„_i eS'("-i)}, 

and for n > 4 and n even, 

S-^"' := {p e PfJ PnP„_i e S-^"-!) us*^^^}. 

Figure shows the structure of these sets and the number of places lying over 
every place. This tower has the following properties. 

Lemma 3.42 (0 Lemma 2.8]). For P e S*"', we have up(x„) = -1. 

Lemma 3.43 (|7l after Lemma 2.9]). The different exponent of a place 
P' G Pf„+i lying over P G S*'"' is given by 

d{P') = d{P'\P) = {q-l){q + 2). 

Theorem 3.44 (j3 Thm. 2.10]). The genus gn of Fn is given by the following 
formula: 

_ f q" + - q^ - 2q^ + 1 if n = 1 mod 2, 

^" ^ \ + - igt+i - fgt -gt-i + 1 if n = mod 2. 

Lemma 3.45 (0 Lemma 3. A]). Let P e Pfi be the zero of xi — a, with 
7^ a G Fjj2 . Then, the place P splits completely in P„/Pi.' i.e., there are 
exactly (7"^^ places above P in Pf„; dH of them having degree one. Altogether, 
there are {q'^ — l)q"~^ places of this type in Pf„- 
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Figure 3.2: An example for a Garcia-Stichtenoth tower [7]- The places lying over 
the zero and pole divisor of xi are shown. The pole divisor Poo and all places 
in the boxes are totally ramified. The places Qi lying over the zero divisor are 
unramified and split completely over an algebraically closed field. 



3.1.9 Some more Galois Theory 



This section cites some important theorems from Galois theory which we will 
need for the construction of quantum AG codes. 

Theorem 3.46 (|30l Thm. III.7.1]). Let F' /K' he a Galois extension of 
F/K and Pi, P2 G Pf' &e extensions of P E Pp. Then P2 = cr(Pi) for some 
a € Gal(P'/P). In other words, the Galois group acts transitively on the set of 
extensions of P. 

Proposition 3.47 (0 Prop. 1.1]). Suppose that F/K is an algebraic function 
field over K = Fq2, q ~ p" ( K is algebraically closed in F). Let w € F and 
assume there exists a place P € Pi? such that 

vp{w) = —TO, where to > and gcd(TO, g) = 1, 

then the polynomial T'' + T — w G F[T] is absolutely irreducible (this follows e.g. 
from Eisenstein's Criterion). 

Proposition 3.48 ( |30L Prop. III. 7. 10]). Consider an algebraic function 
field F/K of characteristic p > Q. Let w €z F and assume there exists a place 
P ePp such that 

vp{w) = —TO, where to > and gcd(TO, q) = 1. 

Let F' = F{z) with 

z"^ + z = w. 

Then F' / F is a Galois extension of degree [F' : P] = q, and for the Galois 
group ofF'/F we have GaliF'/F) ^ (Z/pZ)" . 
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Lemma 3.49 (| 3Ul Remark IV. 3. 7]). For a canonical divisor [zdx), the 
following formula holds: 

{z dx) = (z) + {dx) = (z) - 2(a:)oo + DifF(F/A'(a;)) 

where (x)oo denotes the pole divisor of x. 

3.2 Hyperelliptic Curves 

The main ideas in ChapterEluse the properties of hyperelhptic curves. Therefore 
we will spend one section to introduce this special kind of algebraic varieties and 
Kummer extensions, i.e. algebraic curves. 

Throughout this section let K denote the finite field Fpm . 

Definition 3.50. A hyperelliptic curve over a field K is the point at infinity 
and the set of solutions of the equation 

where f{x) is a square-free polynomial of degree > 5. Similarly a projective 
hyperelliptic curve over a field K is the set of solutions (including the point 
at infinity) of the equation 

y2.^d-2 ^ F{X,Z) 

where F{X, Z) is a homogenous square-free polynomial of degree d > 5. 

Definition 3.51. A hyperelliptic function field over a field K is an algebraic 
function field F/K of genus g >2 which contains a rational subfield K{x) C F 
with [F : K{x)] = 2. 

The context of the following proposition [201 Prop. VI.2.3] is to show that these 
two definitions are equivalent and can be used alternatively. 

Proposition 3.52. Assume that charJ-iT ^ 2. Then the following statements 
hold: 

1. Let F/K be a hyperelliptic function field of genus g. Then there exist 
x,y G F such that F = K{x, y) and 

= f{x)GK[x] 

with a square-free polynomial f{x) of degree 2g + 1 or 2(7 + 2. 

2. Conversely, if = K{x,y) and = f{x) E K[x] with a square-free 
polynomial f{x) of degree m > 5, then F/K is hyperelliptic of genus 

J (m — l)/2 if m = 1 mod 2, 
^ ^ \ (m-2)/2 ifm = 0mod2. 

3. Let F = K{x,y) with y^ ~ f{x) as above. Then the places P G ^k{x} 
which ramify in F/K{x) are the following: 
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all zeros of f{x) if deg/(a;) = mod 2, 

all zeros of f{x) and the pole of x if dcg f{x) = 1 mod 2. 

In particular if f{x) decomposes into linear factors, then exactly 2g + 2 
places of K{x) are ramified in F/K{x). 

Remark 3.53. 

• Example 13.371 can be applied to hyperelliptic curves, i.e. a hyperelliptic 
function field F is a field extension of degree 2. All places have ramification 
index 1 or 2. The places P with e{P'\P) = 2 are described in Proposition 
13.521 As we work with charF ~ p > 2, it does not divide the ramification 
index and we can use Dedekind's different theorem and get the values 
d{P'\P) = e(P'|P) - 1 for the different index. 

• Observe that hyperelliptic curves are symmetric: If (a, /3) is a point on 
the curve, then also (a, —f3) is a point on the curve. This follows from the 
fact that there are a positive and a negative square root of an element. 

Example 3.54. An illustration of a hyperelliptic curve over the reals is given 
in Figure rOl It shows a curve of genus g = 3 over the complex numbers, but 
plotted only over the reals. Topologically, a hyperelliptic curve over the complex 
numbers respectively over the algebraic closure is a torus with g holes. 

The following lemma characterizes the splitting behaviour of the places of the 
rational function field, i.e., if they split into two, are ramified or give a constant 
field extension. This lemma makes use of Proposition lTCT Part 3. and expresses 
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P2=0(P1 



K(x) P2 

Figure 3.4: Splitting behaviour of places of the hyperclliptic function field F 
lying over the rational function field K{x). 

the same idea from a function field point of view. Furthermore, it distinguishes 
between the cases f{Pi\P) = 1 and = 2, presented in Example 13.371 

Lemma 3.55 (|33t Lemma 1]). If P is a finite prime divisor andp(x) the as- 
sociated monic irreducible polynomial in K[x\, then exactly one of the following 
three cases holds: 

1. If p{x)\f{x), then P is ramified. 

2. If p{x) ){f{x) and {f{x)/p{x)) = \, where {■/p{x)) denotes the Jacobi 
symbol then P splits. 

3. If p{x) Jlf{x) and {f{x)/p{x)) — —1, then P is inert, i.e. a constant field 
extension. 

Lemma 3.56. Every hyperclliptic curve respectively hyperclliptic function field 
has an bijective map a of order two called conjugation, flipping the two places 
lying over one place P of K{x), if P splits, otherwise the one place lying over 
P is mapped to itself. 

Proof. If there are two places Pi, P2 £ Pf lying over P £ Pk(x), Theorem 13.461 
states that there exists an isomorphism a with a{Pi) = P2 respectively cr(P2) = 
Pi, because there are only two places lying over P. Therefore a{a{Pi)) = 
(t(P2) = Pi and cr is of order 2. If there is just one place P'|P, we have 
cr(P') ~ P', because elements of K{x) are invariant under cr. □ 

Figure rOl shows that hyperelliptic curves are symmetric. Pictorially, we see that 
the map cr is given by cr(a, /3) = (a, — Hence we have that a{a(a, /?)) = (a, /?) 
and therefore a is of order two. Figure illustrates this. 

Example 3.57. The following Magma calculations show how the rational 
places split or are ramified. We work over K = Fig and use the equation 

2/2 = {x-l){x-2)ix-3){x-4){x^5)e¥ig[x,y]. 

We observe that the second component of each vector is either or there are two 
vectors with the same first component and the sum of the second components 
is 0. 
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F<w> := GF(19) ; 

P2<x,y,z> := ProjectiveSpace(F,2) ; 
//Galois field + projective space 

f := 18*y'2*z~3 + (x-z) * (x-2*z) * (x-3*z) * (x-4*z) * (x-5*z) ; 

X := Curve (P2,f) ; 
g : = Genus (X) ; 

//construction of a curve X corresponding to f 



> PlacesCX, 1) : 
[ 



//rational places of X; 
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In this list Place at (x : y : z) means the point in in homogeneous coordinates. 
Hence the point (0:1:0) defines the place at infinity. 



3.3 Goppa Codes 

3.3.1 Standard Goppa Codes 

This section gives the basic ideas of Goppa codes. The definitions and theorems 
are taken from j21], PHI, and [SHI- In the following, let ¥q be a finite field with 
q ~ p™. let p be a prime number, and let F/¥q be an algebraic function field. 

Definition 3.58. Let F/¥q be an algebraic function field in one variable. Let 
Pi, . . . ,Pn be places of degree one and let D = Pi + • • • + f „ . Furthermore let G 
be a divisor with supp(G) n supp(D) = 0. Then the Goppa code (respectively 
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AG code) Cc C is defined by 

Cc{D,G) = {(/(Fi),...,/(P„))|/e£(G)}CF;' 
Define the following linear evaluation map 

I / - (/(Fi),...,/(P„))- 
Then the Goppa Code is given by Cc{D, G) = ip{C{G)). 

Theorem 3.59 (|3ol Thm. II.2.2]). The code Cc(D,G) is a linear [n, k, d] 
code with parameters 

k = dim G - dim(G - D) 
d > n - dcgG =: ddes- 

The parameter ddes is called the designed distance of the Goppa code. 

Corollary 3.60 (|^ Thm. II.2.3]). Assume dcgG < n and let g be the 

genus of F/¥q . Then we have: 

1. if : C{G) — > Cc{D, G) is injective and Cc{D, G) is an [n, fc, d] code with 

k = dim G>degG + l-g 
d > n — deg G. 

2. If in addition 2g ~ 2 < deg G < n, then 

k = degG + 1- g. 

3. If (/i, . . . , fk) is a basis of C{G), then 

( h{Pl) ••• h{Pn) 

M = \ ■ : 

V fk{Pl) ■ ■ ■ fk{Pn) 

is a generator matrix for Gc{D, G). 

Example 3.61. This example was created with Magma and uses the curve 
constructed in ExamDle l3.57l We use only the pairs of rational points. Therefore 
we will be able to use this example for a quantum code construction. 

In the following we give an example of a Goppa code in Magma: 

//Function to construct a finite field and a projective space 
constr_field := function(q) 
local F, P2; 
F<w> := GF(q) ; 

P2<x,y,z> := ProjectiveSpace(F,2) ; 
return F, P2; 
end function; 
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//Function to construct a curve 
constr_curve := function(P2, f) 
local X, g; 

X := Curve(P2,f ) ; 

g : = Genus (X) ; 
return X,g; 
end function; 



//Excunple of the construction of a Goppa code 
//Construction of the finite field with 19 elements 
//and the corresponding projective space 
F<w>,P2<x,y,z> := constr_f ield(19) ; 
//Definition of a polynomial f 

f := 18*y'2*z~3 + (x-z) * (x-2*z) * (x-3*z) * (x-4*z) * (x-5*z) ; 

//Construction of the curve X corresponding to f 

X,g := constr_curve(P2,f ) ; 

//Divisor group to X 

DG := DivisorGroup(X) ; 

//Rational places of X 

placel := Places(X,l); 

//Function field corresponding to X 

F<a,b> := FunctionField(X) ; 

//Exclusion of the place at infinity 
//and the non splitting place 

D := Exclude(placel,placel[l] ) ; Exclude(~D, placel [14] ) ; 
//Generation of the divisor of rational places for the code 
D3 := &+[DG!D[i]: i in [3.. 16]]; 

//Divisor G for the generation of codewords is an 

//evaluation at the place at infinity 

G := 7* DG!placel[l] ; 

C := AlgebraicGeometricCode (D,G) ; 

This construction leads to the following code: 



> C; 

[14, 6] Linear Code over GF(19) 
Generator matrix: 
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Remark 3.62. To characterize the dual code of a Goppa code we need to 
look at the original definitions of Goppa by means of differential forms and its 
relations to the code defined above. 



Definition 3.63. Let Z) = Pi + • • • + P„ be a divisor, where the P^'s are places 
of degree one of an algebraic function field P/F,, Furthermore let G be a divisor 
with supp{G) n supp{D) = 0. Then we define the code Cn{D, G) by 

Cn{D,G) {{vcsp, {^) , ■ ■ ■ ^resp^uj)) \ uj e ilpiG - D)} C W"^ . 

Proposition 3.64 Thm. 2.4 and 2.5]). The code Cn{D,G), where D 

and G are as above has the following properties: 

1. GciD,G)^ = Gn{D,G). 

2. GniD, G) = a ■ Cc{D, H) with H = D ~ G + (rj) where rj is a differential, 

(??) = -1 /or i = 1, . . . , n, and a ^ (resp^ (r?) , . . . , resp„ (77)) . 

3. Gc{D,G)^ ^a-Cc{D,H). 

The following proposition is cited from |3U[ Prop. VII. 1.2]. It allows to construct 
differentials with special properties that help to construct a self-orthogonal code. 

Proposition 3.65. Let x and y be elements of F such that vp. (y) = 1, vp. (x) = 
and x[Pi) ~ 1 for i ~ 1, . . . ,n. Then the differential r] := x ■ ^ satisfies 
Vp. (rj) — —1 and reap. (77) = 1 for i = 1, . . . , n. 

3.3.2 Weighted Self-Orthogonal Goppa Codes 

Chapter 121 shows that quantum codes have to satisfy certain self-orthogonality 
properties. In order to find codes satisfying them, we will have to work with 
some codes which are what we call "weighted self-orthogonal". 

Definition 3.66. We call a Goppa code weighted self-orthogonal if it sat- 
isfies 

C C C-L" 

with respect to the inner product 



n 



a 




i=l 



where a = 



Corollary 3.67. 



a 



'^i Hi defines an inner product over F^\ 
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Proof. We have to show biUnearity and symmetry to proof this coroUary. Bihn- 
earity is shown in the foUowing. 

n 

{Xx + z.y)" = y^Ot {Xxi + Zi)yi 

n n 

= A ^ fli Xi + ^ a.i Zi Ui 

i=l i=l 

= X{x,yr + {z,yr, 
for A G Fg and x^y^z G IF^. Symmetry is given by 

n 

{x,y)°' = ^aiXiyi 

i=l 



= ^ fli yi Xi 

i=l 



□ 



Corollary 3.68. Similarly, {x, y)^ = X]"=i i^iUn+i - Xn+iyi) defines a sym- 
plectic inner product over F^" . 

Proof. We have to show that {x^y)1 is bihnear, anti-symmetric and that every 
vector is self-orthogonaL First we show biUnearity in the following. 

n 

(Ax + z, y)" = ^ a; {{Xxi + Zi)yn+i - {Xxn+i + z^+i) y^) 

i=l 

n n 

= A ^ (Xiyn+i - Xn+iyi) + ^ fli [Ziyn+i - Zn+tVi) 
1=1 i=l 

= X{x,y): + {z,y): 
for A G Fq and x^y^ z G F^^. The form is anti-symmetric: 

n 
i=l 

n 
i=l 

And every vector has length zero: 

n 

2=1 

n 
1=1 

= 0. 
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□ 



This concludes the chapter about basics in algebraic geometry in which we have 
established a sufficient background to construct quantum codes over algebraic 
curves. 



50 



Chapter 4 



Good Binary Quantum 
Goppa Codes 

In this chapter we give a detailed account of R. Matsumoto's paper "Algebraic 
geometric construction of a quantum stabilizer code " |20 | and an exphcit descrip- 
tion of his code construction. 

Throughout this chapter let F, be a finite field with q = for some prime 
number p. In the explicit construction of a code we use a binary field, i.e. 
q = 2™, but most of the theorems also hold for non-binary fields and can be 
used in Chapter [5| Therefore we state them in the more general case. 

4.1 Existence and Decoding of Quantum Codes 

First, we show under which circumstances a quantum stabilizer code can be 
obtained from an algebraic geometric construction. Subsequently we present a 
method how decoding and error correction can be implemented for these codes. 

4.1.1 Existence and Encoding 

Proposition 4.1. Let F/¥q be an algebraic function field of one variable, a 
an automorphism of order 2 of F which leaves ¥q invariant, and Pi , . . . , P„ 
pairwise distinct places of degree one such that aPi ^ Pj, Vi, j = 1, . . . , n. Let 
r\ be a differential with the following properties: 

vp^rf) = v^pXti) = -1, 

resp,{ri) = 1, (4.1) 
reSaPiiv) = -1. 

The existence of such rj is guaranteed by the strong approximation theorem of 
discrete valuations (see Theorem \S.27)) . Further assume that we have a divisor 
G such that aG — G, vp. (G) — v^Pt (G) = for all i. Define 

C{G) = {(/(Pi),...,/(P„),/(aPi),...,/(aP„))|/G/:(G)}CFf. 
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Let 

where ij is as in Equation i4-l}) - Then we have C(G)^° = C{H) 
Proof. Let a; = (xi, . . . , X2n) e F^" and ?/ = (yi, . . . , y2n) & F^". 

(i) Note that a-{a{f)) = /, because a is of order 2. 

(ii) Let C^iG) {a{x) e F \ (x) > -G} U {0}. As aG G, we get for 
/e£(G): 

<j{f)eC^G) 

so 

a(/)e/:((7G) = /:(G). 

(iii) This gives us for (xi, . . . , X2n) G G(G) 

{xi,...,X2n) e G(G) 

^ 3 / G C{G) with 

(xi, . . . , X2„) = (/(Pi), . . . , /(F„), /(aPi), . . . , fiaPn)) e G(G). 

Remark (ii) gives the equivalence to 

(a(/)(Pi), . . . , a(/)(P„), ^(/)('^A), . . . , ^(/)(^P„)) e G(G). 

With Prop. Vn.3.3] we can rewrite this expression as 

(/(aPi), . . . , /(aP„), f{<y'yPi): R^^Pn)) e G(G). 

Finally Remark (i) gives equivalence to 

(/(aPi), . . . , /(aP„), /(Pi), . . . , /(P„)) e G(G) 
(.T„+i, . . . ,a;2„,xi, . . . ,a:„) e G(G). 

(iv) With help of this observation, we can show that C{G)^' = G{H): 
Let X e G(iJ). Then with Proposition ESI we get for all y G G(G): 

n 2n 

= ^ resp^ (77) Xjj/j + ^ rescrp,{ri) Xiyi 

i—1 i—n-\-l 
n 271 

= ^^■Xiyt+ ^ {-l)-Xiyi 

i—1 n+1 
n 2n 

i—1 i—n+l 

With (iii) this is equivalent to that for all y G G(G) 

n n 
1=1 i=l 

and therefore x G G(G)^^" . 
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Hence by choosing an automorphism of order 2 and suitable residues, we can 
render the identity C(G)^ = a ■ C{H), which we know from classical coding 
theory into the identity C{G)-^'' = C{H). □ 

This proposition tells us that the orthogonal code of C{G) is generated by H. 
The following corollary is a result of the combination of Theorem 13.591 and 
Proposition ^3] above and gives us the wanted quantum code: 

Corollary 4.2. We use the same notations as in Proposition \4.1\ Furthermore, 
we assume that G > H . Then we can construct an [[n, fc, d]] quantum code Q, 
where 

k = dim G - dim(G -Pi P„ - ctPi (tP„) - n. 

For the minimum distance d of Q, we have 

, ^ degG 

a > n — 

Proof. Thcorcm l2.36l and ProDOsition l4. ll show that we can construct a quantum 
stabilizer code from C{D,G), because 

G>H 
^ C{G) 3 C{H) 

^ C{D, G) ^ C{D, H) = C{D, G)-L= . 

By Theorem ESI we get k = dunG{D,G) - n. Then Theorem EHi implies 

dim G{D, G) = dim G - dim(G -Pi P„ - crPi crP„) 

and the statement for the dimension of the code k is proven. 

The next step is to prove the stated bound on the minimum distance d. Suppose 
that 

wt((/(Pi),...,/(aP„))) = 5^0 
for / G C{G). Then there exists a set {ii, . . . , in-s} such that 
/(P,J = /(aP,J = • • • = /(P,„_,) = /(aP.„_,) = 0, 

which implies that f e C{G — J2j=iiPij + '^Pij))- Since / ^ 0, we have 

n— (5 



Cor, 



dim(G-^(P,^ +<tP,J) >0 
'^523 deg(G - (P.^ + aP,^ )) > 



dcgG- 2(n- 5) > 
25 > 2n-degG 

S>~ ^^^^ 



□ 



53 



As in classical AG codes, this construction provides good codes only when q is 
large. Matsumoto |2L)| uses the following theorem to construct q-ary quantum 
codes from g™ ones, if q is small: 

Theorem 4.3 (Ashikhmin and Knill jj). Let m be a positive integer and 
{«!, . . . , ttm} an ¥g-basis o/F^m . Define ¥q-linear maps a : F™ ¥qm sending 
(xi, . . . , Xm) to xiai + ■ ■ ■ + XmCtm, and (3 : F™ F^m sending {xi, . . . , Xm) to 

( x\ 

(ai, . . . , am)M 

V 

where M is an m x m matrix defined by Mij = tr^ [ai,aj), where tr denotes 
the trace map from F^m onto Fg . For C C F^" , let 

7(C) = {(a"^(.Ti), . . .,a^^{Xn),P^^{Xn+l), ■ • ■ ,f3~^ix2n))\{xi, . . . ,X2„) G C} 

C F2"™. Q C for C Q F^Ji, t/ien (7(C))-L= C 7(C). PTe also have 

d{^{Cm{C))^^)>d{C\C^^). 

Now, as we have seen the existence of a quantum code from curves, we still need 
to know how to decode it and correct errors. This is described in the following 
paragraph: 



4.1.2 Decoding and Error Correction 

To decode this code, we can use the Algorithm of Farran Matsumoto reduced 
his code to Farran's algorithm as follows: 



72n 

1 n ^ k and that 



Reduction 4.4. If there exists a vector e G F^" such that (e, bi 



2wt(e) + 1 < n 



degG 



(4.2) 



where {61, . . . , 6„_fc} is a basis of C(G)^= = C!{H) constructed in Corollarv l4.2l 
then we can efficiently find e from si, . . . ,Sn-k as follows. The algorithm of 
Farran ^ efficiently finds the unique vector x having the minimum Hamming 
weight wtnix) in the set {y G F^"| (j/, bi)s = s,; for i = 1, . . . , n — fc} from given 
si,...,s„_fc, provided that 2wt//(x) + 1 < 2n — degG, where {x,bi) is the 
standard inner product of x and bi and {61, . . . ,6„_fe} is a basis of C{H) in 
0{n'^-^^). Let e = (ei, . . . , e2„) and e' = (-e„+i, . . . , -e2„, ei, . . . , e„). Then 
Si = {e',bi) — {e,bi)s- Since wt//(e') < 2wt(e), Equation ()4.2|l implies 

2wtH(e') + l < 2n-dcgG, 

and the algorithm of Farran finds e' from si, . . . , Sn-k correctly. We can easily 
find e from e' with the map 

(ei, . . . ,e„, e„+i, . . . , e2„) i-^ (e„+i, . . . , e2„, -ei, . . . , -e„). 
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4.2 Construction and Bounds 



This section gives the exphcit construction of a quantum stabiUzcr code over 
F2m, its properties, and shows some bounds on the rate k/n and the relative 
minimum distance d/n. 

Proposition 4.5. For an integer m > 2 there exists a sequence of binary quan- 
tum stabilizer codes with parameters [[n.^, /ci, d;]] such that 

lim Ui = oo, 

i — >oo 

lim inf— > i?W((5), 
i— *oo rii 

lim inf — > 5, 

i^oo rii 



where 

Proof. The proof is divided into two parts: First we will explicitly construct 
a tower of algebraic function fields and Goppa codes derived from these fields. 
Later we will prove that these codes have the claimed properties. 



Construction 

1. We use the Garcia-Stichtenoth function field |7]. Its properties and how 
to construct it is explained in Section f3.1.8l Here we use it in the following 
way: Let q = 2™, let Fi = ¥q2 (xi, Z2, ■ ■ ■ , Zn), i > 2 and 

_ Zj 
Xi — 

Xi-l 

2. Claim 1 The Galois group of Fi/Fi-i is isomorphic to the additive group 
of F™ and there exists a cr g Gal(Fi/Fi_i) of order 2. 

Proof. AdpIv Proposition l3.47l and Proposition lT^ of Section l3.1.'51 Here 
[Fi : = q = 2™, so we get that Gal(Ji/Ji_i) is isomorphic to 

(Z/2Z)™ which is equal to the additive group of F™. The existence of a 
follows from the fact that in F™ all elements are self-inverse. 

3. Let Ui := ^'^ "^'^ — and y = x\ — 1. 

Claim 2 The zero divisors of y consist of 2ni places of degree 1. 

Proof. As our field extension satisfies the conditions of Lemma 13.451 of 
Section lri.1.81 we can apply it. So we get that there are exactly q^ — \ places 
P of degree one in Fi and q^^^ over every P, so all together (q^ — 1) • q^^^ = 
2ni places of degree one in Fi. By construction, all zeros of y are of degree 
one. 
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4. Let Ff be the fixed field of a. Let Q be a zero of y. 

Claim 3 There exists a zero Q' of y such tliat Q' ^ Q and Q n Ff = 

Q' n Ff. 

Proof. The isomorphism a is an element of the Galois group of order 2. 
This means that every zero of y is mapped to another one and applying 
a twice gives the identity. Therefore the zeros come in pairs as shown in 
the picture below. Hence aQ = Q' and aQ' = Q. For all x G Q n Ff we 
have a{x) = x, whence x g Q' and x £ Ff , i.e. x £ Q' Ci Ff . The other 
inclusion can be shown similarly. 



R oR 




RnF" 



5. Claim 4 Since Fi/Ff is Galois, we have that aQ = Q' . Therefore we 
can write the zero divisor of y as 

Pi+aPi-\ h Pn, + oPn, 

such that (jPj 7^ Pi for all 1 < j, t < rii. 

Proof. The first part is clear by the proof of Claim 3 and Theorem 13.461 
With the property that all zeros are conjugated by cr, it is clear that one 
can write the zero divisor of y as claimed. 

6. Let 

^ — 1 

dy dy dxi d{x\ ) dxi 



y dxi y dxi y 



y 

As we work over a binary field, we have — 1 = 1, therefore 

dxi 

y 

Claim 5 rj satisfies the conditions of Equation (|4.1() in Proposition 14. II 
and can be used for our construction. 

Proof. 

(a) vp^{l)^v,p^{l) = 

(b) vp.{y) = VaPiiy) = 1, because the elements Pi and a Pi are simple 
poles of y = xf ~^ — 1. 

(c) 1(P,) ^ liaP,) = 1. 
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(d) Now we can apply Proposition 13 .651 which leads to 

resp, (r/) 1, 
reScrp. (77) = 1 = —1 since char(Fg2) = 2. 



Hence all conditions are satisfied and we can use 77 to construct codes. 

7. Let G'q := (77) + Pi+ aPi + • • • + Pm + crPm , and Poo the unique pole of xi 
in Fi. (For existence see Section r^.1.81 1 Then we can apply Lemma fH. 491 
and get 

= {q^ - 2){xi) + (dxi) 

-(Pi + aPi + • • • + Pn, + aPn, + vp^ {xf-^)P^) 

" V ' 

pole divisor of y 

= [q^ - 2){xi) + [dxi] 

-(Pi + dPi + • • • + P„, + aP„, + (g2 - l)vp^ (xi)Poo). 

From this follows that we can write Gq as 

G'^ = {q^-2){xi) + {dxi) 

-(Pi + aPi + • • • + P„, + aP„, + (g2 - l)vp^ (xi)Poo) 
+Pi + ctPi + • • • + P„, + aPn, 
= {q^ - 2)(a;i) - {q^ - l)vp^{xi)P^ + (dxi) 

8. Claim 6 The valuation of the divisor Gq is an even integer at every place 
of P, . 

Proof. To show this, we will have a closer look at the individual summands 
of G^. 

(a) vp^jxi) = -<t~^ 

By Lemma l3.42l in Section f3.1.8l we know that wp^jp^-j (xi) = —1 and 
the unique pole is totally ramified in all extensions. Denote Poo in 
F, by Poo(Pj).We get that e(Poo(Pj)) = e(Poo(P,) | Poo(P,-i)) = q 
for all j > 2 and therefore 

'>^P^{Fi){xi) = e(Poo(PO) • wp^(F._i)(2;i) 

= ••• = <7*-'^;p^(F,)(^i) - 

(b) The discrete valuation of (dxi) is given by 

(dxi) = (1) - 2(xi)oo + Difr(P,/Pi) 
This follows immediately from Lemma [3.491 in Section r3. 1.91 
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(c) The discrete valuation of (dxi) is even at every place of Fi. 
For all e {Pi , aPi , . . . , P„, , (tP„, } 

vp^iidxi)) = z;p^.((l))+wp^.(-2(a;i)oo)+«p,(Diff(P,/Pi)) 

PGPfi P'|P 
' PSPf, p'Ip"" " ' 



The last equation follows because the elements d(P'|P) are all even: 
By Lemma 13.431 in Section 13.1.71 all places of degree one in Fi are 
either totally ramified over Pi_i with different exponent d(P') ~ 
{q — + 2), or unramified, so e(P') = 1 and char(Fg2) = 2 /f 1. 
Therefore we can apply Dcdekind's Different Theorem (sec Theorem 
rOH|) and get d(P') ^ e(P') -1 = 0. As 2 | (q - l){q + 2) and 2 | 0, 
d(P') is also even over Pi for aU P' with P'|P e Pp^. 

Hence we conclude 

G'o = iq^~2){xi)-{q^-l)vp^{xi)P^ + idxi) 
= (g2-2)(xi)-(g2-l)(-g-i)P^ 

(a) 

+ (l)-2(x)oo+Diff(P,/Pi) 

^ V ' 

(b) 

= {q^-2)ixi) + [q^ - l)g'-^^Poo + q) - 2(a;)oo + Diff(P,/Pi) 

even oven (c) even 



and the valuation of Gq is even. 
9. With the result of Claim 6, we can define Gq := ^Gq and get 

deg Go = ^ deg Gq 

= _ 2) deg(xi) + - l)g»-i deg^+ deg(da;i)) 

= 0(a) =2n, =1 

= ^(271; + deg(da;i)) 
= i(2n, + 2.9,-2) 

(b) 

= n^+ g, - 1 
where gi is the genus of P; /Fg2 . 
(a) (xi) is a principal divisor and therefore it has degree zero. 
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(b) (dxi) is a canonical divisor and therefore it has degree 2gi — 2. 
Let j be a nonnegativc integer. 

Claim 7 Go + jPoo satisfies the conditions on G in Proposition l4.1l 

Proof. We have to show that <j{Go + jPoo) = Go + jPoo- Denote that 
poles are mapped to poles and zeros are mapped to zeros under a and Poo 
is unique. 

a{Go+jPoo) = (jGo+jaPoo = crGo+jPoo 

= a Q {{q' - 2)(xi) - (g2 - l)q^-^P^ + (dx^))^ 

+]Poo 



-a {^Vp{dxr)P\^ +jPo. 



+a ^ wp(l)P + up^(dxi)Poo +jPoo (4.3) 

_p ) (g^-iy-y _2P +,p 



^i;p(xi)P 



p 

+ Yvp{dxi)P + jPoo 

p 

= _ 2)(a;i) - (g^ - l^-ip,, + {dx,))+jP^ 

- Go + jPoo 

Equation H4.3|l follows because of the following: Let us have a look at the 
properties of dxi. Denote that xi is a P-prime element for all P except 
Poo. For Poo we can use ^ as P-prime element. Therefore for P ^ Poo 



vp{dxi) — vp{\ ■ dxi) ^= ■ wp(l). 



For P = Poo we get 



dxi = — y!- d — = — I — I d — 
d-i- xi \xi J xi 



which implies that 



vpAdx,)^vp^\-(- d-^vp\-l-] )=-2 



59 



11. Let 

H = (Pi + • • • + P„, + aPi + • • • + (tP„J - (Go + jPoo) + (?/) 
= (Pi + --- + P„, +aPi + --- + (TP„J 

i((?7) + Pi + <tPi + • • • + P„, + aP„, ) + jP^,^ + (77) 

= I (('?) + Pi + <yPl + ■ ■ ■ + Pn, + <7Pn, ) - 3 Poo 
= Go — jPoc- 

Then Go + jPoo > Go — jPoo = H, and therefore by Proposition 
G(Go+jPoo)^= = G(i/) = G(Go-jPoo) 
c G(Go+jPoo). 
By Corollary 14. 21 we can construct a quantum stabilizer code from C. 

Properties of the Constructed Code 

1. Claim 8 By Corollary 14. 21 for i,j G N we can construct an [[ni,kij,dij]] 
stabilizer code with 

ki] > 3, dij > {rii - gi - 3 + l)/2 
Proof. Corollary 14 . 21 implies that 



dij ^ Tli 



>0 

degG I „ ^ 



deg Go + jP^ 



2 



(9.) constr. ^_ _ \ ri,+gi~\+] ^ ^ ^. _ n,+gi-l+3 



2 



For hij we have to assume j < Ui — gt and obtain then 
kij = dim G 

- dim(G - Pi P„, - aPi aP„, ) - 77, 

= dim(Go + jPoc) - dim(-Go + jPoo + (v)) - n^ 

> deg(Go + jPoo) + 1 - g, - dim(-Go + jPoo + (v)) - ^^.(4.4) 

= [{rii + gi - 1) + j + {1 - gi) - Tli] 

-dim{-Go+3Poo + {v)) (4.5) 
= 3 (4.6) 

In these calculations, Equation (|4.4|) follows from Thcorem l3.26l Equation 
(|4.5|) follows from 9. of the code construction and Eauation H4.6|l is a 
consequence of the following calculations: 

deg(-Go + jPoo + iv)) = -("» + - 1) + j + {2g^ - 2) 

< 5i - 77j - 1 + (77; - gi) 

= -1 

< 
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By Corollarv l3.25l it follows immediately that dim(— Go + jPoo + (v)) = 0- 

2. Let i? be a real nmiibcr such that < i? < 1 and [i^n^J < rii — gi. Set 
j :~ \_Rni\. By Theorem 14.31 we can construct a sequence of [[n^, fe;, o?i]] 
binary quantum stabilizer codes. 

Claim 9 This code has the following properties 

liminf— > RI^\S), liminf— > S, 



I— too m J— ►oo m 



Ria\S) = 1-— — -4m5. 



where 



Proof. 

lim inf — > lim inf — = lim inf — = R 

The binary code obtained from Theorem 14.81 has rate = hi. 

therefore the same rate as the higher dimensional case. Moreover, 

y ■ fdt ■ A^i- gi-ji + i)/2 

lim mt — > lim mt 

- - lim inf ~ ^' ~ L-^"'-l ^ 

2 i— »oo Tli 

1 - i? - 2/(2" - 1) 
2 

l-i?-2/(2™-l) 

> =: 

4m 

And for the binary case 

li„,inf-i^ > liminf + 
i— >oo 2771 • n,; i^oo 2m • rii 

1 - i?- 2/(2™ - 1; 



(4.7) 



4™ 



= : 5. 



Equation 1)4. 7|l follows if wc use the genus formula of Theorem 13.441 and 
calculate 



For i ~ \ mod 2: 



n, (22™ - l)(2")'-72 

lim — = hm 



woo woo (2m)i + (2'")*-! - [T^y— + 1 

1 22'" - 1 



2 2™ + 1 

1 (2™ + 1)(2™ - 1) 

2 2™ + 1 
2™ - 1 
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• and for i = mod 2: 



lim 

i — 'oo 

= lim 



(2'^'"-l)(2"')'~V2 



j-foo (2™)» + (2'")«-i-i(2™)4 + ^-f (2™)3-(2'")i"^ + l 
_ 1 2^'"-l 
2 2™+l 
^ 1 (2'" + l)(2"'--l) 

2 2'"+! 
_ 2™-l 



We now can calculate Rm^ (S) = R: 



3 = 

4 m 



l-_R-2/(2"^-l) 
4 m 

AmS = l-i?-2/(2™-l) 
R = 1 - - imS, 



which establishes the claimed result. 



□ 



4.3 A Small Example for the Construction 

Next, we give an example for a code we get from Matsumoto's construction. 
To do so, we consider the shortest possible length. Let m = 2 and i = 2, so 
g = 2^ = 4 and therefore we use the field F42 = Fig. Then Fi = Fi6(a-i) is the 
rational function field and F2 ~ ^1(22) = ^mixi, Z2) with 

z^ + Z2-xl = 0. 

Using Magma jJUl we can calculate the genus of the extension: 

Magma V2. 11-5 

Type ? for help. Type <Ctrl>-D to quit. 

> F<w> := GF(16) ; 

> P2<x,y,z> := ProjectiveSpace(F,2) ; 



> f 

> X 

> g 

> g; 

6 



y~4*z + y*z~4 - x~5; 
Curve (P2, f ) ; 
Genus (X) ; 



Now we are able to estimate k and d: 

, ^ . , . «2 - 52 - i + 1 30 - 6 - j + 1 i - 1 
k2,j > J, d2,j > = = 12 — 

This gives us the possibility to choose a suitable value for R. We will have a 
look at two examples. 
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1. Set i? = i, then j = i • 30 = 15. We get 

fc2,i5>15, d2,i5 > 12 - = 5. 

Using Theorem 14. 31 we get for the parameters of the binary code 
n^A-n2 = 120, fc = 4 • fcs.is > 60, d = ^2,15 > 5. 

Therefore we can calculate the ratios 

k 60 _ 1 d 5 _ 1 
n-120~2' n-120~24 

and the limits arc bounded by 

^ -j^ (i 1 ~ ^ -j^ 

lim inf — > - , lim inf — > ^— !- = . 

i^oo rii 2 i— ►oo Tij 4-2 48 

This gives an estimate < and therefore is not a valid parameter. 

2. Set E = i, then j = i • 30 = 10. This gives us 

^2,10 > 10, d2.io > 12 - — ^ = 7-5, so ^2,10 > 8. 
From Theorem 14.31 we get for the binary code 

71 = 4 • ?i2 = 120, fc = 4 • fc2,io > 40, d = d2ao > 8. 

Therefore we can calculate the ratios 

fc 40 _ 1 d 8 _ 1 
n-T20~3' n-120^T5 

and the limits arc bounded by 

j^. ^ d- \ — 2 

lim inf — > -, lim inf — > — ^-^—^ =■ 0. 

j— too n.j 3 i— >oo rii 4 • 2 

Hence i? = i is the threshold in order to get ^ > 0. Therefore we 
should use R <\. This gives an [[120, > 40, > 8]] binary quantum error 
correcting code. 
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Chapter 5 

Codes over Hyperelliptic 
Curves 

The following chapter uses the machinery introduced in the preceding chapters 
to construct quantum error correcting codes from Goppa codes. We will work 
over fields of odd characteristic. If we would work in characteristic 2 we would 
get the first step of the hierarchy used in Matsumoto's construction explained 
in the preceding chapter. 

In this chapter we will first look at the CSS construction that can be applied to 
all self-orthogonal AG codes. We will generalise this construction to weighted 
self-orthogonal codes. Afterwards we will directly construct quantum Goppa 
codes, comparable to Matsumoto's construction in [201 ■ Finally we shall see 
some examples that illustrate the construction. 

5.1 The CSS Construction Revisited 

This section shows how we can use hyperelliptic curves to construct quantum 
AG codes. The construction is similar to the one in the next section, but is 
easier to prove. 

5.1.1 General Construction 

1. Let K := Fpm be a finite field of odd characteristic, and choose a hyper- 
elliptic curve 

= /(a;), 

where f{x) is a square-free polynomial of degree > 5. Let F := K(x,y) 
be the corresponding function field, (sec Chapter 

2. Then F has a set of rational places (see Definition 13. 17|l . We choose any 
subset of pairs and denote it by SP = {Pi, . . . , P„}. 
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Set D = Pi + ■ ■ ■ + Pn and G ( [f J + .9 - 1 - r)Poo, where r can be 
chosen with < r < ?i — g and Poo the place at infinity. We also set 
{t]) = W = —D + {n + 2g — 2)Poo- Then is a canonical divisor to the 
differential 

T] = — — rdx. 

Proof. The proof is similar to the one given in Lemma 15.41 □ 

3. Denote the residues of ?/ at the places Pi, . . . , P„ by 

Oi = resp, (77) . 

for i = 1, . . . , n. 

4. Now we can construct a classical Goppa code C{D,G) (see Section rO|l 
with 

C{D, G)^ = C{D, H) ■ diag(ai, . . . , a„) 

where H^D~G-\-W\s defined as usual (proof see Theorem 2.5 in 
The code satisfies C{D,G) C C{D,H) and therefore C{D,G) C 
C(D, G)^ with respect to the inner product ( , )°. This will be shown in 
Corollarv l5.1l 

5. If not all coefficients Oi are in the base field, we can transform our code 
to a code C'{D,G) that satisfies C'{D,G) C C'{D,G)-^'' with respect to 
a new inner product {x^y)^ = X]"=i ^iXiUi where all hi are in Fp, if m is 
odd. This is proved in Proposition 15. 21 

6. Now we take two copies of C'{D, G) and multiply in the first copy every 
codeword component wise with the corresponding coefficient bi . Then we 



can apply the CSS construction and get a generator 





■ Ci,i ■ 




• 


■ 


\ 


bi 


■ Cl,l ■ 




• 


• 












Cl,l • 


• Ci,„ 




\ 








ci,i ■ 


■ Q,n 


/ 



matrix 



if the classical code C'{D, G) has generator matrix 

/ ci,i • • • Ci^r. 



A proof of this is given in Corollarvl5. 



7. If we want to project this code and used the modifications of the original 
code above, we can apply the special case where all coefficients Oi are in the 
base field ¥p. Therefore this CSS construction has a nice down projection 
that allows us to write the new code as a symmetric one with weights 
in the X component. 
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5.1.2 Correctness of the Construction 



To justify and clarify the above construction, in the following subsection we 
prove all statements claimed in the last section. 

Corollary 5.1. Let C{D,G) be the Goppa code constructed in Section \5.1.1\ 
with G = ( [f J + .9 - 1 - r)Poo and 

a = (ai, . . . ,a„) = (resp^ (??) 7 • ■ • ,resp„ (77)). 

Then the code satisfies G{D, G) C C{D, H) with H = D — G + {rj) and therefore 

C{D,G) C C{D,G)^'' 

with respect to the inner product {,)"'■ 

Proof. First we have to calculate H: 
H = D-G + {ri) 



= D- 
n 
2 



+ .9 - 1 - Poo + i-D + {n + 2.9 - 2)Po< 



n 

.2. 

f .9 - 1 + r j Poo 
> G. 

Therefore G{D, G) C G{D, H) and by [21 Thm. 2.5] 

G{D,G)^ = Cp,i7)-diag(ai,...,a„). 
It follows that all codewords x,y of C{D,G) satisfy 

n 

ai XiUi = 0, 

1=1 

and C{D,G) is self orthogonal with respect to the inner product 

n 



□ 



Proposition 5.2. // not all weights a,; are in the base field, we can transform 
our code to a code C'{D,G) that satisfies G'{D,G) C C'{D,G)-^ with respect 
to a new inner product {x,y)^ = X]"=i ^i^iVi where all bi are in ¥p, if m is odd. 

Proof. The idea is to use Stichtcnoth's proof how to transform residue squares 
into residues with value one (Corollary 3.4 in |29|). 

1. For all elements that satisfy resp^ (77) = fef for some bi E Fpm, set u{Pi) = 
bi. For all the others with resp. (rj) ~ di and d,; is not a square, set u{Pi) = 
1. The existence of u is given by the Strong Approximation Theorem (see 
Theorem ll-{.27|l . Set G' = G — {u) with new residues resp. {u~^rfj = 
TCSp. {rj') = 1 for all elements that were squares. The residues of the other 
P( stay di. 
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The residues for our new code over G' are 1 if possible. All elements of 
Fpm are of the form with r = 1, . . . and a a generator of Fpm. The 
idea is to transform all residues to elements of the base field. It turns out 
that this is only possible under the circumstances that m is odd. We get 
this result from the following calculations: The elements of the base field 
are those which satisfy the equation 

We can use this property to find elements bi satisfying 

where a*"' = d,;. Denote bi := a*^' for some fc^. Our goal is to find hi that 
satisfies the equation above. We have that 



-1 



{n~2h){p-l) = c-(p"-l), 
for some c (because of mod — 1). We know that 

and s is odd iff m is odd. Our equation can be transformed to 2ki ~ Vi—c-s. 
As the elements are odd (otherwise they are squares which would have 
been transformed to 1 in step 1), c- s has to be odd. Therefore s has to be 
odd and this yields that m odd. Hence — c • s is even and we can divide 
it by 2. Therefore we can find ki such that our equation 2ki = — c • s is 
satisfied and our residues can be transformed by 

r, - c • s 



to elements of Fp {0}. Therefore we get a code C'{D,G) that is self- 
orthogonal with respect to an inner product with weights (residues) bi in 
¥p. We can apply the trace operation on the code and the inner product 
over ¥pm and get the weights out of the trace: 



tr((x,2/)^) = ^tr(6, 



^tr(6, 5] ^xp'yf 



71 m 7n 
i=l k=l 1=1 ^ ^■"^ ' 

where {ai, . . . , am} is a self-dual basis for ¥pm /¥p, i.e. for all basis ele- 
ments holds tr{aiaj) = 6ij (for existence see ^| Ch. 2, Notes 3.]) and 

(1) , , (™) 
Xi = xyai-\ h X] 'ara 

for all codewords x. Therefore we get a code over Fp that stays self- 
orthogonal with respect to an inner product ( , )^. 
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□ 



Corollary 5.3. Take two copies ofC'{D,G) defined above and multiply in the 
first copy every codeword component wise with the coefficients bi. Then we can 
apply the CSS construction and get a generator matrix 



( 


• CIS ■ 




• 


■ \ 


bi 


■ CIS ■ 


' ^1,71 


• 


• 










CIS ■ 


• Cl,„ 


V 








CIS ■ 





if the classical code C {D, G) has generator matrix 

I CIS • ■ ■ ci,„ 

Gel = \ ■ • . \ 

\ CIS • • • C;,„ 

Proof. The classical code C'{D, G) satisfies 

{x,y)' = 

for all codewords x,y. So if Qci is a generator matrix of the classical code 

g = 



Gel 






Gel 



is a valid CSS quantum stabilizer code with respect to the symplectic inner 
product 



1=1 



because 



((xi, . . . ,x„,0, . . .), (2/1, ■ • ■ ,yn,0, . . .)>t = ^b,{x.,-0-0-y,)^0, 

i=l 
n 

((0, . . .,Xn+l, ■ ■ ■,X2n), (0, . . • • ■ • ,2;2ri)>s = ^b,{0 ■ Pn+t ~ Xn+i ' 0) 

1=1 

= 0, 

n 

((xi, . . . , a;„, 0, . . .), (0, . . . , y„+i, . . . , y27i))'l = ^ b, {x,y„+i -0-0) 

1=1 

n 

= ^ bi xtyn+i = 0. 

1=1 

Now we can apply Lemma r2.32l and transform our CSS code to a quantum code 
with respect to the standard symplectic inner product. □ 
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5.2 Direct Construction and Code Properties 



The goal of this section is to show how it is possible to use Goppa codes over 
hypcrcUiptic curves to construct quantum stabilizer codes. 

5.2.1 Construction of Weighted Self-Orthogonal Codes 

In order to make the construction more transparent, we will divide it into several 
smaller steps. The construction is similar to the one given in SectionEUm First 
we will present the construction; the corresponding proofs can be found in the 
following subsections. 

1. see 1. in Construction 15 . 1 HI 

2. Then F has a set of splitting rational places fsee 13.171) . Choose a set of 
pairs 

SP = {Pi,...,Pn,(TPl,...,aPn}, 

where a denotes the hyperelliptic conjugation and Pi and aPi are the two 
places lying over one rational place in K{x). 

The following elements are similar to Construction 15. IJl but the values 
are a bit different because we use 2n rational places. Set 

D = Pi + --- + Pn + aPi + --- + crPn 

and 

G = {n + g-l-r)P^ 

where < r < n — g can be chosen and Poo is the place at infinity. 
We also set 

(ij) = W = -D+{2n + 2g-2)Po^. 
Then is a canonical divisor. 
Proof. W = {7]) for 

7] = — = — -dx 

V Up, cor. a. 

is proved in Lemma 15.41 Therefore W comes from a differential and is 
canonical. □ 

3. The residues of 77 at the places Pi, . . . , P,i, crPi, . . . , crP„ satisfy 

ai = resp, (77) = -reScrP; (??) . 
for i ~ 1, . . . , n (proof see Lemma l5.5|l . 
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4. Now we can construct a Goppa code C{D,G) (see Section IX^ with 

C{D, G)^^ = C{D, H) ■ diag(ai, . . . , a„, 1, . . . , 1) 

where H = D — G + W \s defined as usual (proof see Proposition l5.6|l . The 
code satisfies C(Z3, G) C C(D, H) and therefore C[D, G) C C{D, G)-^" 
with respect to the symplectic inner product ( , )° what is proved in 
Corollary EH 

5. With the help of Corollary 15. 81 we transform G{D, G) to a self-orthogonal 
code C'{D,G) with respect to the standard symplectic inner product by 
multiplying each component Xi of every codeword by the corresponding 
a.i, for 1 < i < n. The difference to Construction I5.1J1 is that we have 
self-orthogonality with respect to a symplectic inner product and not with 
respect to an inner product. 

6. G'{D,G) defines a stabilizer code with parameters [[n, k, d]], where n is 
the number of used splitting rational places of the rational function field, 

k>r and d > "-9+^-^ (gcp Proposition 

The following subsections include the proofs for the construction above. 



The Canonical Divisor and its Residue Properties 



In the following construction of a weighted self-orthogonal Goppa code we always 
set 

W = -D+{2n+{2g-2))P^ 
where W is the canonical divisor. 

Lemma 5.4. t] is the differential corresponding to W with 

y lip. cor. a. (^-"i) 

where the elements ai are the x-coordinates of the points on the curve corre- 
sponding to the places Pi. 



Proof. We will calculate (rj) explicitly. 

= + 2nP^ -Y.P^-Y.^'P^^ 2(x)^ + Difr(^^//v (x)) 

= - ^ Q, + {2g + l)Poo+'2nP^-^P,-^(jP, 

irrcd. of f{x) 

-2.2Poo+5]5](e(P)-l)P' (5.1) 

p P'\p 

= -D+ {2n + 2g - 'd)P^ - ^ + ^ 1 • + 1 • Poo 
= -D+{2n+{2g-2))P^ 

= W (5.2) 
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Equation (|5.1|) follows from that fact that 

^ dcg/(.)^2,, + l 

for {2g + l)Poo, and that e{P) — 2 for the irreducible components of f{x) and 
Poo, otherwise e{P) = 1. 

□ 

Lemma 5.5. The differential 

y lip, cor. a. (^-"i) 

satisfies 

resp. (77) = -resap, {r]) . 

Proof. Let {ai,Pi) be the corresponding point to Pi. Then (a^,— /3i) is the 
corresponding to a Pi. We get 



resp; (77) 
reSffP, (7]) 



1 



1 

1 

— resp; (77) . 



□ 



Weighted Self-Orthogonality and Quantum Code Construction 

The following proposition is similar to Proposition 14. II except that the residues 
at the conjugate places do not have to be 1 and —1, but negative to each other. 
Proposition 14. II is stronger, because it shows the existence of a special differ- 
ential 77, but the proof is not constructive. Here we prove the weaker version, 
because the differential constructed in Lemma and Lemma lF31 satisfies these 
conditions. 

Proposition 5.6. LeA F/^q be an algebraic function field, a an automorphism 
of order 2 of F not moving elements in ¥q, and Pi, . . . ,P„ pairwise distinct 
places of degree one such that a Pi ^ Pj for all i, j = I, . . . ,n, D = Pi + ■ ■ ■ + 
Pn + crPi + • • • + crPji . Let rj be a differential with the properties 

vp,{v) = v^p^ir]) = -I, 
resp, (77) = -res^p. (77) . 

Further assume that we have a divisor G such that aG = G, vp^ (G) = Vap^ (G) ~ 
0. Define 

C{D,G) = {(/(Pi),...,/(P„),/(aPi),...,/(aP„)) I /e£(G)} CFf . 
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Let H = D—G+{rf), then we have C{D, G)-^' ~ C{D, H) where a ~ (oi, . . . , a„) 
are the weights of the symplectic inner product. 

Proof. The proof is similar to the one of Proposition 14.11 The only difference 
is the more general assmiiption that resp. (rj) ~ — reSg-p. (rj), instead of 1 and 
-1. ' ' □ 

Corollary 5.7. Let C{D,G) be the Goppa code constructed above and 

a = (ai, . . . , a„) = (resp^ (r/) , . . . , resp„ (yy)). 

Then the code satisfies C{D, G) C C{D, H) with H = D — G + (rj) and therefore 

G{D,G) C C(L>,G)-L" 

with respect to the symplectic inner product ( , 

Proof Note that G = (n + g - 1 - r)Poo and (?;) = -D + (2n + 2g - 2)P^. 
Therefore we can calculate H in the following 

H = D-G+{ri) 

= D- (n + g-l- r)Poo + (-D + {2n + 2g - 2)P^) 
= {n + g-l + r)Poo 
> G. 

So we get C{G) C C{H) and thereby G{D,G) C C{D,H). Now we apply 
ProDOsition l5 .61 and use that C{D, G)^= = G{D, H). This leads to the following 
implications and concludes the proof: 

1. Then for ah x e C{D, G), y G G{D, H) we have that 

n 

{x,y)1 = ai{xiyn+i - Xn+tyi) = 0- 

i=l 

2. In particular because C(D, G) C G{D, LI) this equation holds for all x,y E 
G{D,G). 

3. Therefore C(D, G) C G(D, G)-^" and the claim is proved. 

□ 

Corollary 5.8. For G <H, G and H as above, we have C{D,G) C C{D,H). 
Lf we multiply 

C'{D,G) = G(AG) -diagCresp, (77),..., resp,. (ry),!,...,!) 

then C' is a linear self-orthogonal code with respect to the standard symplectic 
inner product. This code modification does not change the code properties and 
defines a quantum code. 

Proof. The proof of Corollary 15.71 is independent of the choice of D and G. 
Therefore G{D,G) C C{D,G)-^= holds under the more general assumptions of 
this corollary. Hence G{D, G) meets the conditions of a stabilizer code and 
Lemma [2 .321 proves the corollary. □ 
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Code Properties 



Proposition 5.9. LetC'{D,G) be the Goppa code constructed by Corollary \5. ?| 
and Corollarv \5.8l Then C'(D,G) is a stabilizer code with parameters [[n,k,d]] 
where n is the number of used splitting rational places of the rational function 
field, k > r and d > 



2 



Proof. 



1. Wc can construct a stabilizer code, because G'{D,G) C C' {D ^G)^' (see 
Theorem lO^ . Since our code transformation did not change the code 
properties we can calculate the properties of C{D, G) in order to get those 
of G'{D,G). 

2. Now we can apply Corollary 14.21 bv changing G and H which enables us 
to calculate k and d. 



3. For d we get 



d > n 



degH 
2 

n + g - 



> 



n — g + I — r 



4. For the bound on k we need the Theorem of Riemann-Roch 

k = dim H — dim(iJ — D) — n 

> degH +1- g - dmi{H - D) - n 

= {n + g- l + r) + l- g- dim{H - D) - 

= r. 



(5.3) 



Equation (|5.3|) follows because dm\{H — D) = Q 

Proof. Note that < r < ?i — g. Therefore the following equation holds: 

deg(i? - D) = dcgH - deg D 

= {n + g-l + r) - 2n 
= r- {n- g)-l 
< -1. 

Now we can apply Corollary 13.251 and get dim{H — D) ~ 0. 



□ 
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5.3 Projection onto the Prime Field 



If wc have a code over a field Fp™ , it may be desirable to project it onto the base 
field ¥p. For this projection we can use the ideas of Ashikhmin and Knill in Pj. 
Note that this projection is always possible. In the following we will also see 
under which circumstances it is possible to find a nicer projection that allows 
us to see the coefficients at respectively the new coefficients as weights of 
the symplectic inner product. 



5.3.1 General Case 

The general case uses almost completely Ashikhmin and Knill's ideas in Q]. It 
gives us the following projection properties. 

Proposition 5.10. Let {ai, . . . , am} be a self-dual basis for Fj,™ over ¥p , then 
the projection 

(aixi, . . . ,a„a;„,a:„+i, . . . ,a;2„) ^ ((aia;i)'^^\ (aiXi)'^^\ . . . , x^"^), 

where each component Xi = xf'^ ai + • • • + a;^'"^a,„ is represented in the self-dual 
basis, of the code C'{D,G) onto the base field gives a stabilizer code C{D,G) 
with respect to the symplectic inner product 

n m 

i=i j=i 

Proof. First observe that if a symplectic inner product of two vectors is zero, 
then so is the trace over it ^ where the trace of an element a G Fpm over the 
base field is defined as 

m 

tr(a) = '^a^a, 

where the elements ai are the Galois automorphisms of Fpm /Fp |16l Chapter 
VI. 5]. Next we will show that the new code is still self-orthogonal with respect 
to the new inner product. For x,y G C'{D, G) we get that 



= tr((a;, = tr ^^{oi Xi y„+i - x„+i Oi pi) 



\i=l 
n m m 



= E E E((«'^ ^^)^'' - ^ul («. tr(a,a,) 

i=l j=l k=l ^ ' 

=<5jfc 

n m 

= EE(K^')^''^2/^=^-^«l(«'y^)'''^)' 
i=i j=i 

and therefore C{D, G) C C{D, G)-^?. Finally, we have to show that this code is 
again a linear code. Therefore let 

X = ((ai.Ti)(i),(aia;i)(2),...,4™))and 

y = {{amf'\{a,y,r\...JZ^)eC{D,G), 
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2/7 elements 




m elements m elements 



2nm elements 

Figure 5.1: Projection from a code with codewords of length 2n over ¥pm onto 
codewords of length 2nm, over the base field Fp. 

then there exist x,y E C'{D, G) with 

X = ((aixi)'^^^ai H h (aia;i)'^™^a™, . . . , x^^^ai + a;^"^a™) 

y = ((ai?/i)<^^Q:i H h (aiyi)'™^am, . . . ,a:;^|j^Q!i + .4™^a™). 

Let s S Fp. As C'{D, G) is a linear code, and Fpm is a Fp-linear vector space, 

s-x + y={[s- (aia;i)(i) + (aiyi)(i)]ai + • • • + 
[s ■ (ai.Ti)(™) + (aiyi)(™)]a,„, . . . , [s • + y(:)]ai + [s ■ x'^' + yt\ra) 

is in C'{D, G) and therefore 

s-A'+J^ = (s-(aixi)(i) + (aiyi)(i),...,s.(aixi)(") + (ai2/i)("), 

...,s-xi'2+yi'J,...,s-x^^^+y!i;:^)eC{D,G). 

Therefore the projected code is a linear code satisfying the symplectic inner 
product and defines a quantum stabilizer code. □ 

Figure WTl] illustrates how the codewords split with respect to the self-dual basis. 
Note that this p-ary linear code cannot necessarily be written as a code of the 
form 

C'(i^,G)-diag(ai^',...,al™),l,...,l) 

like in the p™-ary case. This is possible in some special cases shown in the next 
section. 

5.3.2 Special Case: The Weights G Fp for all i 

The following special case allows us to write our projected code in the form 
C'(i^,G).diag(al^\...,a(r), !,...,!). 

A way to get an easy projection is the case that all are elements of Fp, because 
the trace is Fp-linear, i.e. tr(ai) = aitr(l). So we get for all codewords 
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2/7 elements 



c 




m elements 



2nm elements 



Figure 5.2: Projection of a codeword of the code C over Fpm onto the base field 
F„ if all a, are in F„. 



i=i 

n mm 

i=i j=i k=i 

n mm 

1=1 j=i k=i ^ ' 

= Ojk 

n m 

i=i j=i 

and our new code can be written as 

C = ^{aix[^\ . . . , anx';l'^^\z[^\ . . . , z^^) : (aiXi, . . . , a„x„|zi, . . . , z„) £ c|. 

Figure shows how the coeSicients split with respect to the self-dual basis. 
The figure is just slightly different from the general case of the previous section. 

5.4 Examples 

5.4.1 Curves with Many Rational Points 

An example of a curve with many rational points is given in |28l Theorem 6.14]. 
We will analyse the case over F^™ where m is odd. Let = f{x) with 

f{x) = [x + xP"^ ){x + xP"^ ) eFp^^x] 

be a hyperelliptic curve. This curve does not satisfy the standard definition 
of a hyperelliptic curve because it is not square-free, i.e. can be extracted 
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from the equation. In the foUowing we see that it is stiU possible to construct a 
quantum code, i.e. a quantum code with good parameters. 

Claim 5.11. f{x) has no hnear divisors except for x. 
Proof. We can rewrite f{x) as 

fix) = x^il + xP'^-^){l + xP'^'^). 

It suffices to show that none of the two factors different from is divisible by 
a linear polynomial. 

Let a e Fpn, , then 
1 + xP ' 



J2 oi'xP' 



i=0 



This equation can only hold if ^ ^ + 1 = and therefore ^ ^ = — 1. 

Then a^^^^^-i) = 1. This is only possible if 2(pT^ - l)|p™ - 1. Assume 
2(pT^ - l)|p'" - 1, then 

»™ - 1 1 ™+i 1 p - 1 



- 1) 2(p't- - 1) 

So the assumption is only true if p — 1 = 0, therefore p = 1. This contradicts 
that p is an odd prime greater than two. Therefore we have shown that there 

exists no linear polynomial dividing 1 + x^ ^ Now we have to do the same 
calculations for the second factor: Let again a E Fpm . then 



E 



X — a — ' X ~ a 

i=0 

m+l ni + 1 

This equation can only hold ifa^ ^ ^^ + 1 = and therefore aP ^ = — 1. 
If there exists a solution, then 2{p^~ — — 1. Assume this equation is true, 
then 

2(p^ - 1) 2(p^ - 1) 

So the assumption is only true if —1 = 0, but the calculations take place 
in Fpm which is a field of characteristic p and therefore p^~ — which leads 
to the contradiction = — 1. 

We conclude that there exists no a 7^ such that x ~ a divides f{x). Therefore 
f{x) has no linear divisors except for x. □ 

Corollary 6.15 in j2Hl shows that it is possible to actually calculate the number 
of rational points 

iV„™ = 2n™-l 
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As the only linear polynomial that divides f{x) is x, there are = — 2 

pairs that can be used for a quantum stabilizer code. This follows immediately 
from Proposition 13 . 521 that the only rational places are those which are zeros of 
f{x) and Poo- 

Now we will apply our construction of Section 15.21 use all rational pairs, and 
look at the asymptotics in the limit of large m. 

1. First let us calculate the ratio of rational places versus genus of the curve: 

_ deg/(x) - 1 

2 



Hence the ratio of Npm and gpm for m to infinity is given by 
hm ^ . Iim2. ^^"-1 



7n — >-oo 



gp,„ m^oo (p + 1) - 1 

4 ™±i 
= lim • p 2 — _|_oo 

m — >oo p ~\- \ 

> 0. 

This ratio is not bounded and goes to infinity. Therefore it is good. 
2. The parameters of our family of codes Cm{Dm, Gm) are given by 



Tim 






2, 


h 


> 






dm 


> 


Tim- ~ 


^771 ~t~ 1 Tm 




3. Setting ?■,„ = [R n,„J < rim — 5m, we obtain 



and for the distance 
dr, 



T . ^m ^ 1 . ^m 

lim > lim 

m— too rim m— »oo rim 

= lim 

m^oo ?i„j 

> R 

> 0, 



2 



lim — - > lim — 

m^oo rim m-^oo rij^ 



m^oc 



2 V TT-m ^TTJ. Tlrn. Tlfi 



> 



for i? < i. 
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This gives good quantum codes as long as we do not project it onto the base 
field, because the down projection will not necessarily enlarge the distance of the 
code and therefore the ratio cannot be bounded from zero. The disadvantage 
of these codes is that their alphabet size tends to infinity. 

5.4.2 Magma Calculations 

In this section we explicitly construct some quantum AG codes with the help 
of Magma jTH]. Magma outputs a classical Goppa code and the residues of 
the corresponding differential. With simple calculations and reordering of the 
columns we get a quantum error correcting code with respect to the standard 
symplectic inner product. 

Example 5.12. This example continues the computations begun in Example 
13.611 and transforms it into a quantum code. The Magma code can be found in 
Example EH 

//differential corresponding to W 
k := Canonical (W) ; 

//residues of k at the D[i]'s 
for i:= 1 to #D do 
Residue(k,D[i] ) ; 
end for; 

If we set 7' = 1 ; where 0<r<n — gis the parameter that can be chosen, the 
error correcting code C is equal to the one in Example 13. 6 II 



> C; 

[14, 6] Linear Code over GF(19) 
Generator matrix: 



[ 


1 














13 





14 


15 


11 


17 


15 


4 


16] 


[ 





1 











6 





5 


6 


10 


13 


15 


13 


1] 


[ 








1 








10 





7 


12 


11 


2 


6 


6 


14] 


[ 











1 





9 





12 


4 


5 


16 


12 


2 


13] 


[ 














1 


1 








4 


4 


5 


5 


3 


3] 


[ 




















1 


1 


17 


17 


5 


5 


11 


11] 



Now we have to rearrange the columns with the permutation 

(Xi, Zi,X2, Z2, • ■ • ,2:„, Z„) (xi,X2, . . . ,a;„ I Zi,Z2, • ■ • 

and we get the generator matrix 



Gi = 



( 1 











15 


17 


4 








13 


14 


11 


15 


16 \ 














6 


13 


13 


1 





6 


5 


10 


15 


1 





1 








12 


2 


6 








10 


7 


11 


6 


14 














4 


16 


2 





1 


9 


12 


5 


12 


13 








1 





4 


5 


3 








1 





4 


5 


3 


V 








1 


17 


5 


11 











1 


17 


5 


11 / 
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For the quantum code with respect to the symplectic mner product {x,y)'^ = 
X]r=i O'ii^iUn+i — Xn+iUi) we havc to determme the elements a,; which are given 
by the residues of the differential 

> k; 

((a + 2)--l * (a + 3)--l * (a + 4)--l * (a + 8)--l 

* (a + 12)--1 * (a + 13)--1 * (a + 7)~-l * (b)"-!) d(a) 



These are given by the vector 

a = (01,02,03,04,05,06,07) 
= (3,11,1,10,14,5,12). 

Therefore we have to multiply the columns with the residues which is the same 
as multiplying Gi ■ D where D = diag(ai, . . . , a„, 1, . . . , 1). The transformed 
quantum code is given by the matrix 



( 3 











1 


9 


10 








13 


14 


11 


15 


16 \ 














8 


8 


4 


1 





6 


5 


10 


15 


1 





11 








16 


10 


15 








10 


7 


11 


6 


14 














18 


4 


5 





1 


9 


12 


5 


12 


13 








1 





18 


6 


17 








1 





4 


5 


3 


V 








10 


10 


6 


18 











1 


17 


5 


11 / 



If we take another r and set r = 2, we get the code 



> C; 

[14, 5] Linear Code over GF(19) 
Generator matrix: 



[ 1 
[ 
[ 
[ 
[ 



14 

5 

1 1 





6 
13 



1 1 




11 14 



4 

1 1 17 17 



5 13 12 13 

8 7 16 17 18 4 

16 16 18 18 8 

4 5 5 



8] 
9] 
8 8] 
3 3] 
11 11] 



and therefore the stabilizer matrix 



/ 1 











14 


13 


13 





14 


6 


11 


5 


12 


8 
















7 


17 


4 


1 


5 


13 


8 


16 


18 


9 







1 








16 


18 


8 





1 








16 


18 


8 










1 





4 


5 


3 








1 





4 


5 


3 




V 








1 


17 


5 


11 











1 


17 


5 


11 


1 



with respect to the same symplectic inner product {x, y)1 as above. The trans- 
formation of the code gives us 



/ 3 











6 


8 


4 





14 


6 


11 


5 


12 


8 


\ 














3 


9 


10 


1 


5 


13 


8 


16 


18 


9 







11 








15 


14 


1 





1 








16 


18 


8 










1 





18 


6 


17 








1 





4 


5 


3 




V 








10 


10 


6 


18 











1 


17 


5 


11 


/ 
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Therefore we constructed two quantum Goppa codes over Fig with parameters 
[[7, 1, > 3]] and [[7, 2, > 2]]. 

The following example uses a prime power and works with abstract symbols 
instead of "numbers". 

Example 5.13. Let us work over Fg with the hypcrcUiptic curve 

Then we construct with Magma the following algebraic code: 
> C; 

[8, 3, 5] Linear Code over GF(3~2) 
Generator matrix : 
[ 1 w w 1 w~6 w~5] 
[010 w~5 w w~6 w~3 w~5] 
[0011 w'2 v~2 v~3 w~3] 



and if we order the columns with respect to the conjugated pairs, we get 

/ 1 w w 1 \ 

Gs = w 1 \ , 

\ 1 w3 1 w'^ J 

where w is a generator of Fg. In this case the differential k is given by 
> k; 

((a + w-3)--l * (a + 2)--l * (a)--l * (a + w)--l 

* (a + l)~-2 * (a + w'2)'-l * (a + w~6)~-l * (b)) d(a) 



and we get the vector of residues 

a = (oi, 02, as, 04) 

Finally the quantum AG code is given by the matrix 



G'3 




w 



w 
1 

1 



1 



w 



w 



Example 5.14. In general, we can use the following program to construct 
codes, if we use a curve that has no linear factors over the given field: 



constr_f ield 
//as before 



:= function(q) 



constr_curve := function(P2, f) 
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//as before 



constr_code := function(K,P2,f ,r) 

local X, g, DG, place l,F,D,D3,G,W,C,k, res; 

X,g := corLStr_curve(P2,f ) ; 

DG := DivisorGroup(X) ; 

//placel gives all places of degree 1 

placel := Places(X,l); 

F<a,b> := FuiictionField(X) ; 

//D are the places where we evaluate the elements of G 
D := []; 

for i:= 1 to (Floor((#placel-l)/2)) do 
D[i] := placel [2*1] ; 

D[(Floor((#placel-l)/2)) + i] := placel [2*1+1] ; 
end for; 
D3 := DG! &+D; 

//r can be varied to change the dimension of G 
//G is the space of "codewords" 
G := (Floor(#D/2)+g-l-r) * DG ! placel [1] ; 
//W is canonical divisor 

W := - D3 + (#D + (2*g-2)) * DG Iplacel [1] ; 
C := AlgebraicGeometricCode (D,G) ; 

//differential corresponding to W 
k := Canonical (W) ; 

//residues of k at the D[i]'s 
res : = [] ; 

for i:= 1 to Floor (#D/2) do 

res[i] := Residue(k,D[i] ) ; 
end for; 

return C, res; 

end function; 



To use this program wc first have to define a field 
> K<w>,P2<x,y,z> := constr_f ield(3) ; 

and a curve that has no linear factors over K 

f := -y"2*z"3 + (x"2 + z~2)*(x~3 + 2*x~2*z + z'3) ; 
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Then we can follow the code construction by the command 
C, residues := constr_code (K,P2 ,f , 1) ; 



We obtain 

> C; 

[4, 2, 2] Linear Code over GF(3) 
Generator matrix: 
[10 10] 
[0 10 1] 

> residues; 
[ 2, 1 ] 



This means that we have obtained a quantum code with respect to the symplec- 
tic inner product given by the residues. The columns of the generator matrix 
are already in the right order. We just have to multiply the first half of the 
columns component wise with the residues. 
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Chapter 6 

Conclusions 



In conclusion, we have seen some constructions of quantum Goppa codes over 
binary and non-binary fields. First, a paper of Matsumoto about the construc- 
tion of good binary codes has been presented in detail. Second, we have seen 
that hyperelliptic curves can be used to construct quantum Goppa codes over 
arbitrary finite fields. We have presented two different methods to construct 
quantum codes from algebraic curves: either we use the CSS construction or 
we work with the properties of splitting places on hyperelliptic curves and gen- 
erate quantum codes directly. We have illustrated the constructions by giving 
concrete examples, most of which have been computed with the help of the com- 
puter algebra system Magma |19| . An example of a family of asymptotically 
good codes has been presented where the size of the alphabet grows to infinity. 
Furthermore, we have presented a way to project codes over prime power fields 
on their base field. For the reader who is not familiar with all the basics, in- 
troductions to coding theory, algebraic geometry, and quantum error correction 
are provided. 

Interesting questions for future work include how to use these quantum Goppa 
codes over hyperelliptic curves to construct good families of codes. One pos- 
sibility to get good families is to think of a hyperelliptic curve as a Kummer 
extension. Kummer extensions define infinite function field towers that provide 
families of codes. These codes are asymptotically good if we find a good tower, 
i.e. a tower with many rational places. 

Finally, this thesis provides the first explicit construction of quantum Goppa 
codes over non-binary fields that can be applied to all hyperelliptic curves. 
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Appendix A 

Postulates of Quantum 
Mechanics 

Quantum mechanics is the key to quantum computing and quantum error cor- 
rection. Everything is based on the following four postulates that are cited 
from |23| . We do not need them for the construction of quantum error cor- 
recting codes, but they help us understand the principles of quantum codes. 
Postulate 1: Associated to any isolated physical system is a complex vector 

space TL with inner product (that is, a Hilbert space) known as the state space 
of the system. The system is completely described by its state vector, which is 
a unit vector in the system's state space. 

This first postulate explains why we use a Hilbert space and qubits etc. as basic 
states of our system. 

Postulate 2: The evolution of a closed quantum system is described by a 
unitary transformation. That is, the state of the system at time ti is related 
to the state jV'') of the system at the time t2 by a unitary operator U which 
depends only on the times ti and t2, 

W) = u\^), 

i.e., the time evolution of the state of a closed quantum system is described by 
the Schrodinger equation, 

^nf = HIV.), 

where h is Planck's constant and H is the Hamiltonian of the system. 

Postulate 3: Quantum measurements are described by a collection {Mm} 
of measurement operators. These are positive licrmitean operators acting 
on the state space of the system being measured. The index m refers to the 
measurement outcomes that may occur in the experiment. If the state of the 
quantum system is {tp) immediately before the measurement then the probability 



85 



that result m occurs is given by 



Pirn) = (V-IM^M™!^), 
and the state of the system after the measurement is 

The measurement operators satisfy the completeness equation, 

The completeness equation expresses the fact that probabihties sum to one: 

m m 

Everything we have to know of Postulate 3 is that measuring an arbitrary quan- 
tum state will destroy the superposition and project the state with respect to a 
chosen basis. 

If we define new operators E,n = Ml^M,n, we get J2m ~ ^- These positive 
operators Em are called POVM elements and the set {Em}, known as a 
POVM, suffices to determin the propabilities of the different measurement 
outcomes. 

If the operators Em satisfy Em = P^Pm = Pm and Pm,Pm = Sm'mPm, the 
operators are knwon as projectors and the measurement is called projective or 
orthogonal. In this thesis we will assume that orthogonal measurements are 
always possible. 

Postulate 4: The state space of a composite physical system is the tensor 
product of the state spaces of the component physical systems. Moreover, if we 
have systems numbered 1 through n, and system number i is prepared in the 
state then the joint state of the total system is \tpi) (E) \ip2) <E) ■ ■ ■ ^ iV'n)- 

This postulate describes the existence of quantum registers introduced in Defi- 
nition 12.61 
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